Windows 11 KB5124008 update breaks domain trust for some users

Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on some enterprise systems, preventing users from logging in with valid domain credentials.

Administrators report on Reddit and Microsoft's Q&A forums that affected computers lose their secure channel with Active Directory after the Windows 11 update is installed and devices reboot.

Last week, Microsoft confirmed to BleepingComputer that it is aware of the reports and is investigating.

"Microsoft is aware of these reports and is investigating. We will share guidance as it becomes available," Microsoft told BleepingComputer.

While Microsoft has not confirmed the root cause, reports indicate that the failures are linked to the Windows Machine Identity Isolation security feature, especially when it is enabled in audit or enforcement mode.