AI Generated Image
Windows 11 KB5124008 update breaks domain trust for some users
BleepingComputer • • technology
Key Points:
- Microsoft is investigating reports that the Windows 11 KB5124008 security update is causing domain trust relationship failures on some enterprise systems, preventing users from logging in with valid domain credentials.
- Affected computers lose their secure channel with Active Directory after installing the update and rebooting, leading to domain authentication errors despite correct credentials.
- The issue appears linked to the Windows Machine Identity Isolation security feature, which is set to enforcement mode by the update and affects how machine account credentials are stored and accessed.
- Administrators have found that disabling Machine Identity Isolation or uninstalling KB5124008 can restore domain trust, but Microsoft warns that disabling this feature may also cause domain authentication problems requiring domain rejoining.
- Microsoft has not confirmed the root cause or provided an official workaround yet but is actively investigating and will share guidance when available.
