Summary: Microsoft has resolved authentication issues linked to Credential Guard when using the Kerberos PKINIT protocol, primarily affecting Windows 11 (version 24H2) and Windows Server 2025. Users experienced problems with password rotation, which led to user authentication difficulties on some enterprise systems. These issues are predominantly found in enterprise environments, leaving home devices largely unaffected.
Affected: Microsoft Windows 11, Windows Server 2025
Keypoints :
- Authentication problems arise when Credential Guard is enabled and Kerberos PKINIT is used.
- Devices fail to change passwords every 30 days, leading to perceived stale or disabled accounts.
- The issue was fixed in April 2025, though Microsoft temporarily disabled Machine Accounts in Credential Guard until a permanent solution is found.