Notification of potential problem: Microsoft security update may affect GS/SGS connections

Microsoft has released a new server update in relation to DCOM security. See the link below for details.

https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

This has the potential to affect client GS/SGS connections and also GOS connections.

If this update has been applied to your MTS servers and your clients are not on a recent Windows OS version then users may see “Access is Denied” errors when attempting to login to Genera applications. You will also see the following DistributedCOM error on the MTS servers in Event Viewer > Windows Logs > System.

To work around this issue, until clients have been updated, the new security option can be disabled by adding the following registry settings on each MTS server as per the linked article.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat

Value Name: “RequireIntegrityActivationAuthenticationLevel”

Type: dword

Value Data: default = 0x00000000 means disabled. 0x00000001 means enabled. If this value is not defined, it will default to enabled.

Note You must enter Value Data in hexadecimal format.

Important You must restart your device after setting this registry key for it to take effect.

Please advise us if you have any questions or concerns regarding this notification.