Windows 11 Patch Disrupts Domain Trust on Enterprise PCs
Microsoft’s Windows 11 KB5124008 security update is reportedly breaking domain trust for some enterprise computers, causing logon failures as the secure channel to Active Directory is disrupted after reboot. The issue appears linked to the Machine Identity Isolation feature within Virtualization-Based Security/Credential Guard, especially when set to enforcement mode. Some admins have temporarily fixed it by disabling Machine Identity Isolation and repairing the secure channel, but Microsoft has not confirmed the root cause or issued an official workaround yet.