According to Bleeping Computer, the May security updates for Windows are causing authentication failures when using Active Directory on domain controllers.
Microsoft strongly recommends not deleting them and asks to wait for new patches to fix the problem. System administrators have found a way around the bugs by making edits to the server registry.
The company also advises manually mapping certificates to a computer account in Active Directory in the registry section with the SChannel key as a way to fix the problem before the patch is released.