Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on some enterprise systems, causing valid domain credentials to fail after reboot. Administrators say the issue appears linked to the Machine Identity Isolation feature in Windows 11 25H2, with some systems recovering after disabling it and repairing the secure channel. #Microsoft #Windows11 #KB5124008 #MachineIdentityIsolation #ActiveDirectory
Keypoints
- KB5124008 is reportedly breaking domain trust on some Windows 11 enterprise devices.
- Affected systems lose their secure channel with Active Directory after reboot.
- Users may see valid domain logins fail even when cached credentials still work offline.
- Reports point to Machine Identity Isolation in audit or enforcement mode as a possible cause.
- Some administrators restored access by disabling the feature and repairing the secure channel.