Sysvol not updating
In the end, I wonder whether this group policy setting has caused more grief than it saved.If you do not set any group policy but patch your servers and clients within a few weeks of the patch release, you should not have any issues with RDP.Set Encryption Oracle Remediation to Vulnerable until the server is patched.There has been surprise and alarm in some quarters this week when RDP suddenly stopped working.Additionally we continue testing the PDC support in our continuous integration system.
If you are updating Samba, always read the release notes of all versions between the previous and the one you are updating to.
This issue affects all versions of Windows; check CVE-2018-0886 for a list of KB numbers by Windows version.
I finally found the update applied to a Windows 7 virtual machine that I allow to update automatically. Copy these two files from that machine to a temporary location: C:\Windows\Policy Definitions\Cred (dated 2/9/2018) C:\Windows\Policy Definitions\en-US\Cred (dated 2/10/2018; adjust language folder to your local language) 3.
This means you can update a Samba 3.x NT4-style primary domain controller (PDC) to a recent version, as you previously updated, for example from 3.4.x to 3.5.x.
There is no need to migrate an NT4-style domain to an AD.