Microsoft Aug 13 2019 security patch affects the legacy DRA web console

  • 7024091
  • 27-Aug-2019
  • 13-Sep-2019

Environment

Directory and Resource Administrator 9.x Legacy ASP Web Console
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Internet Explorer 10

Situation

As of August 13, 2019 Microsoft has released a security roll up patch for the Windows 2012, 2012 R2 and 2016 Server based OS. This roll up patch contains multiple individual patches. One or more of the patches within this roll up will cause compatibility issues with the legacy NetIQ Directory Resource Administrator (DRA) Legacy Web Console. Microsoft has a known issue with Visual Basic 6 (VB6), macros with Visual Basic for Applications (VBA) and scripts or applications that use Visual Basic Scripting Edition (VBScript). The legacy ASP Web Console (URL Format: http(s)://Servername/DRA) is directly impacted by changes to the legacy Microsoft Visual Basic Scripting features.

Resolution

Microsoft has released additional security patches, which will resolve the known issues caused by the patches within the August 13 2019 security roll up patch. The patch details are listed below

- 4517298 Update for Windows 8.1 and Windows Server 2012 R2: August 16, 2019 -- https://support.microsoft.com/en-us/help/4517298/windows-8-1-update-kb4517298
- August 17, 2019—KB 4512495 (OS Build 14393.3181) --  KB 4512495 (OS Build 14393.3181)" target="_blank">https://support.microsoft.com/nl-nl/help/4512495/windows-10-update-kb4512495


Cause

After applying the following patches, the Legacy DRA Web Console may fail to work. These patches affect the use of various underlining legacy Microsoft technologies. The web console will have failures with pages related to create new AD object. The create page will display only a blank page. In addition, the pages related to managed user object properties will display a blank page. The affected patches were released as a part of the Aug 2019 security roll up for Windows OS. The path details are as follows:

August 13, 2019—KB 4512482 (Security-only update) -- KB 4512482 (Security-only update) " target="_blank">https://support.microsoft.com/en-us/help/4512482/windows-server-2012-update-kb4512482KB 4512482 (Security-only update) " target="_blank">
August 13, 2019—KB 4512488 (Monthly Rollup) -- KB 4512488 (Monthly Rollup)" target="_blank">https://support.microsoft.com/en-us/help/4512488/windows-8-1-update-kb4512488KB 4512488 (Monthly Rollup) " target="_blank">KB 4512488 (Monthly Rollup)" target="_blank">
August 13, 2019—KB 4512489 (Security-only update) -- KB 4512489 (Security-only update) " target="_blank">https://support.microsoft.com/en-us/help/4512489/windows-8-1-update-kb4512489
August 13, 2019—KB 4512518 (Monthly Rollup) -- KB 4512518 (Monthly Rollup) " target="_blank">https://support.microsoft.com/en-us/help/4512518/windows-server-2012-update-kb4512518
August 13, 2019—KB 4512517 (OS Build 14393.3144) -- KB 4512517 (OS Build 14393.3144) " target="_blank">https://support.microsoft.com/en-us/help/4512517/windows-10-update-kb4512517


Additional Information

As of DRA 9.2.x the legacy ASP console is no longer considered to be the primary web based client user interface for the product. By using our new DRA REST based Web consoe, you will gain access to the most current features and benefits of a web based DRA User Interface In order to configure and install the current primary web based interface, please download and install the DRA REST extensions installer. Future releases of DRA , post DRA 9.2.x will deprecate the features of the ASP based web UI.