KB5028166Catastrophic

Domain trust broken, Synology NAS severed

Active DirectoryDomain AuthenticationSynologySambaNetworking

What broke

July’s update broke the trust relationship between domain-joined workstations and their domain controllers. Login attempts — both local and RDP — failed with “The trust relationship between this workstation and the primary domain could not be established.” Synology NAS devices running Directory Server were also severed, forcing Synology to release an emergency patch. Samba domain controllers on Linux were broken too. Microsoft managed to simultaneously break authentication with their own Active Directory, with Synology’s directory service, AND with Linux Samba domains. An equal-opportunity destroyer.

Sources

  1. Neowin: KB5028166 incident report
  2. Windows Latest: KB5028166 incident report

Related Windows update incidents