From 4c63746745e33a7d3e30ad2ee50d1617d7a67001 Mon Sep 17 00:00:00 2001 From: Michael Nady Date: Sat, 7 May 2022 21:49:18 +0200 Subject: [PATCH 1/5] implementing #10379 #10379: please find a reference link that confirms this edit. I suggest this link but an SME can confirm more https://quickview.cloudapps.cisco.com/quickview/bug/CSCul55352 --- .../credential-guard/credential-guard-known-issues.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md b/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md index 3599199593..e9ecd31edf 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md @@ -59,6 +59,9 @@ The following known issues have been fixed by servicing releases made available ## Known issues involving third-party applications +The following issue affects MSCHAPv2 +Credential guard doesn't work with MSCHAPv2 configurations, of which Cisco ISE is a very popular enterprise implementation. + The following issue affects the Java GSS API. See the following Oracle bug database article: - [JDK-8161921: Windows Defender Credential Guard doesn't allow sharing of TGT with Java](http://bugs.java.com/bugdatabase/view_bug.do?bug_id=8161921) From b0a26ecc32805da48e4ecb79f5add92a262c5e5a Mon Sep 17 00:00:00 2001 From: Michael Nady Date: Sun, 8 May 2022 20:29:34 +0200 Subject: [PATCH 2/5] implementing #10334 implementing #10334 I added the error 0x80072F8F as reported, and classified it based on this link, please verify: https://windowsinstructed.com/how-to-fix-0x80072f8f-a-security-error-occurred/ --- .../hello-for-business/hello-errors-during-pin-creation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md index 72148e773a..5960a280fc 100644 --- a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md +++ b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md @@ -84,9 +84,9 @@ For errors listed in this table, contact Microsoft Support for assistance. | Hex | Cause | |-------------|---------| -| 0X80072F0C | Unknown | | 0x80070057 | Invalid parameter or argument is passed. | -| 0x80090010 | NTE_PERM | +| 0X80072F0C | Unknown | +| 0x80072F8F | A mismatch happens between the system's clock and the activation servers' clock when trying to activate windows | 0x80090010 | NTE_PERM | | 0x80090020 | NTE\_FAIL | | 0x80090027 | Caller provided a wrong parameter. If third-party code receives this error, they must change their code. | | 0x8009002D | NTE\_INTERNAL\_ERROR | From 840d8a5292f889ac4ffd2695ea6b00b7a3a9826a Mon Sep 17 00:00:00 2001 From: Michael Nady Date: Tue, 17 May 2022 17:12:34 +0200 Subject: [PATCH 3/5] Update windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-errors-during-pin-creation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md index 5960a280fc..6ac7938191 100644 --- a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md +++ b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md @@ -86,7 +86,7 @@ For errors listed in this table, contact Microsoft Support for assistance. |-------------|---------| | 0x80070057 | Invalid parameter or argument is passed. | | 0X80072F0C | Unknown | -| 0x80072F8F | A mismatch happens between the system's clock and the activation servers' clock when trying to activate windows | 0x80090010 | NTE_PERM | +| 0x80072F8F | A mismatch happens between the system's clock and the activation server's clock when attempting to activate Windows. | 0x80090010 | NTE_PERM | | 0x80090020 | NTE\_FAIL | | 0x80090027 | Caller provided a wrong parameter. If third-party code receives this error, they must change their code. | | 0x8009002D | NTE\_INTERNAL\_ERROR | From 595fde525d895186f84b2f02ac48c89695ccbbc3 Mon Sep 17 00:00:00 2001 From: Michael Nady Date: Tue, 17 May 2022 17:13:50 +0200 Subject: [PATCH 4/5] Update windows/security/identity-protection/credential-guard/credential-guard-known-issues.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../credential-guard/credential-guard-known-issues.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md b/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md index e9ecd31edf..7d71cc00ce 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-known-issues.md @@ -59,8 +59,9 @@ The following known issues have been fixed by servicing releases made available ## Known issues involving third-party applications -The following issue affects MSCHAPv2 -Credential guard doesn't work with MSCHAPv2 configurations, of which Cisco ISE is a very popular enterprise implementation. +The following issue affects MSCHAPv2: + +- [Credential guard doesn't work with MSCHAPv2 configurations, of which Cisco ISE is a very popular enterprise implementation](https://quickview.cloudapps.cisco.com/quickview/bug/CSCul55352). The following issue affects the Java GSS API. See the following Oracle bug database article: From b665497693fc9247cc51b21fe1070c4daa2445d9 Mon Sep 17 00:00:00 2001 From: Angela Fleischmann Date: Thu, 19 May 2022 12:43:52 -0600 Subject: [PATCH 5/5] Update hello-errors-during-pin-creation.md Fix matrix row 89 (now 89 and 90). Delete spaces, add pipe and return to create separate line. Header suggestion should resolve. --- .../hello-for-business/hello-errors-during-pin-creation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md index 6ac7938191..4753b3c6f4 100644 --- a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md +++ b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md @@ -86,7 +86,8 @@ For errors listed in this table, contact Microsoft Support for assistance. |-------------|---------| | 0x80070057 | Invalid parameter or argument is passed. | | 0X80072F0C | Unknown | -| 0x80072F8F | A mismatch happens between the system's clock and the activation server's clock when attempting to activate Windows. | 0x80090010 | NTE_PERM | +| 0x80072F8F | A mismatch happens between the system's clock and the activation server's clock when attempting to activate Windows.| +| 0x80090010 | NTE_PERM | | 0x80090020 | NTE\_FAIL | | 0x80090027 | Caller provided a wrong parameter. If third-party code receives this error, they must change their code. | | 0x8009002D | NTE\_INTERNAL\_ERROR | @@ -105,7 +106,6 @@ For errors listed in this table, contact Microsoft Support for assistance. | ​0x801C044C | There is no core window for the current thread. | | 0x801c004D | DSREG_NO_DEFAULT_ACCOUNT: NGC provisioning is unable to find the default WAM account to use to request AAD token for provisioning. Unable to enroll a device to use a PIN for login. | - ## Related topics - [Windows Hello for Business](hello-identity-verification.md)