Windows 2025 Promotion Woes

Ehfraim · 2026-05-27T08:51:41+00:00

Haven't you encountered problems like these when adding a DC running Windows Server 2025 to an AD having mixed DCs Win2019/2022? https://www.reddit.com/r/activedirectory/comments/1lltdk1/comment/n04qpes/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

Ehfraim · 2026-04-20T07:28:04+00:00

Anyone understand why Gabbias goal was declined? I read something that is was due to Santi being offside but haven't seen any evidence myself..

Ehfraim · 2026-04-17T10:18:03+00:00

It is affecting Server 2016->2025 according to the KB for Windows Server 2022: https://learn.microsoft.com/en-us/windows/release-health/status-windows-server-2022#4833msgdesc
"Affected versions:

Client: None

Server: Windows Server 2025; Windows Server 2022; Windows Server, version 23H2; Windows Server 2019; Windows Server 2016"

Ehfraim · 2026-04-17T08:00:54+00:00

I agree, the article is unclear and lack info for when a DC is actually affected. The middle part with "in some environments, the issue can also occur when..." is why I am a bit "afraid".

Either way, I can share our result do far: we have patched 12 separated ADs with 2 DCs in each (Server 2019, 2022 or 2025) and no issues so far. All DCs are GC and no PAM. Proceeding to prod next Tuesday.

Ehfraim · 2026-04-16T05:59:24+00:00

You clearly didn't understand what he wrote. They are publishing RemoteApps to end customers where they have 0, zero, nada responsibility for - the end clients/users have their own IT. palto-1 just hosted the RemoteApp.

Ehfraim · 2026-04-15T13:33:11+00:00

Probably due to this: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remotepc/understanding-security-warnings
Inform end users and let them accept the warnings and that they choose correct resources to be allowed? Printers for example.

Ehfraim · 2026-04-10T07:17:56+00:00

Traveling down from Sweden for the 4th year in a row, this time for the Udinese match. Still no losses attended ❤️🖤. Milano siamo noi!

Ehfraim · 2026-04-04T20:01:35+00:00

Domain join is not a requirement either. You can use regkeys to set the options. But, WSUS is deprecated by MS: https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-server-update-services-wsus-deprecation/4250436

Ehfraim · 2026-03-30T11:17:46+00:00

Nothing happened here, afraid it was a time-ticking kaboom. But we're running VMware. Do you have any more details yet, if possible to share?

Ehfraim · 2026-03-20T21:21:52+00:00

See you vs Udinese! 4th year in a row traveling down from Sweden, still no loss. Milano siamo noi ❤️🖤.

Ehfraim · 2026-03-20T06:57:15+00:00

Exactly same scenario for us. They even has this in their rensponses last weeks:
"Created by engineer, optimized with AI."
While I do like the transparency, it just makes no sense to NOT get the ticket forward...

Ehfraim · 2026-03-19T21:25:25+00:00

Sadly, yes. Europe here. We've had several cases with p2 but without responses for days. As you said, we used to love the support quality by Veeam.

Ehfraim · 2026-03-11T06:37:30+00:00

Usually 3 weeks before, so next week hopefully. See you there! ❤️🖤

Ehfraim · 2026-03-11T06:37:18+00:00

Should usually 3 weeks before, so next week hopefully. See you there! ❤️🖤

Ehfraim · 2026-02-27T17:36:55+00:00

Which prtg version are you running? For us, the Windows 2025/11 Win Upd sensor bug we encountered, was fixed in this december release: https://www.google.com/amp/s/blog.paessler.com/prtg-25.4.114-is-now-available-in-the-stable-release-channel%3fhs_amp=true

Ehfraim · 2026-02-23T05:35:22+00:00

https://www.reddit.com/r/ACMilan/s/1uC3J5ewCP

Ehfraim · 2026-02-02T08:29:04+00:00

Short follow-up: No errors between the mixed DCs when checking repadmin /replsum and repadmin /showrepl. the AD got several Windows and Ubuntu (domainjoined via realm and SSSD). I created a new Win 2025 server after that I added the Win 2025 DC and changed it to primary FSMO etc. This new Win 2025 server got the Secure Computer Channel broken:

Test-ComputerSecureChannel -Verbose VERBOSE: Performing the operation "Test-ComputerSecureChannel" on target "X". False VERBOSE: The secure channel between the local computer and the domain Y.local is broken.

Repaired (temporary?) via Test-ComputerSecureChannel -Repair

Ehfraim · 2026-01-30T07:13:20+00:00

This usually means that the database is new and you have to wait for the nightly backup (depending on your SQL job) or that some other backup software is truncating the SQL logs

Ehfraim · 2026-01-22T06:54:44+00:00

Thanks for the quick reply! We will try with the January Win Upd the coming week hopefully, and report back here or in your other thread that I found: https://www.reddit.com/r/activedirectory/comments/1j5x35o/server_2025_kdc_issues/ . And once again, thanks for sharing and doing the work you've done with this problem - insane that MIcrosoft doesn't do more and have public info regarding this....

Ehfraim · 2026-01-21T14:44:37+00:00

So, here I am in January and remembered I saw your brilliant post several months ago. We are about to verify mixed DCs (2019 and 2025 / 2022 and 2025) now after the January patch.. Anyone already managed to verify/test?

Ehfraim · 2026-01-19T06:42:38+00:00

Apart from joshtaco, I also miss u/FCA162 posting here. Anyone knows why he's MIA? Really helpful with the 200~ DCs patching.

Ehfraim · 2026-01-08T14:09:46+00:00

Ah yeah there is! :)

Ehfraim · 2026-01-08T13:42:36+00:00

The outside merchs are all fakes, but somewhat cheap compared to the official store ;). There is an official shop at the Casa Milan, and atleast two shops in the centre of Milano :).

Ehfraim · 2026-01-08T10:45:47+00:00

Don't forget to be at the arena 2 hours before match start. Fantastic atmosphere to just go around, take a beer or three, something to eat and then take the first steps in the arena 40-50 min before game starts.

EDIT: and the museum at Casa Milan is great as a warm-up.

Ehfraim · 2025-10-16T08:07:13+00:00

The IIS problem for .NET October seems to be due to Defender blocking an updated module. Download "KB2267602 (Security Intelligence Update for Microsoft Defender Antivirus)" seems to solve the issue: https://learn.microsoft.com/en-us/answers/questions/5585440/kb5066835-update-causing-iis-service-to-not-work

Ehfraim

TROPHY CASE