Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses.

This is the list of Identity-related updates and fixes we saw for November 2023:

Windows Server 2016

We observed the following update for Windows Server 2016:

KB5032197 November 14, 2023

The November 14, 2023, update for Windows Server 2016 (KB5032197), updating the OS build number to 14393.6452 is a monthly cumulative update and includes no Identity-related improvements.

Windows Server 2019

We observed the following update for Windows Server 2019:

KB5032196 November 14, 2023

The November 14, 2023, update for Windows Server 2019 (KB5032196), updating the OS build number to 17763.5122, is a monthly cumulative update and includes one Identity-related improvement. It addresses an issue that affects Windows Local Administrator Password Solution (LAPS). Its PasswordExpirationProtectionEnabled policy fails to turn on the setting. Use this setting to configure enforcement of maximum password age for the managed local administrator account.

Windows Server 2022

We observed the following update for Windows Server 2022:

KB5032198 November 14, 2023

The November 14, 2023, update for Windows Server 2022 (KB5032198), updating the OS build number to 20348.2113, is a monthly cumulative update and includes one Identity-related improvement. It addresses an issue that affects Windows Local Administrator Password Solution (LAPS). Its PasswordExpirationProtectionEnabled policy fails to turn on the setting. Use this setting to configure enforcement of maximum password age for the managed local administrator account.

Additionally, this update addresses a known issue that affects virtual machines (VMs) that run on VMware ESXi hosts. Windows Server 2022-based VMs might fail to start up. The affected VMs will receive an error with a blue screen and a stop code:

PNP DETECTED FATAL ERROR