A Windows Server 2016 security update is tied to a failure in domain controller discovery, a reminder that identity infrastructure can stumble over surprisingly narrow edge cases.