Microsoft Shares Workaround for Windows Domain Login Issues
ID: a11363df-9ff1-5733-8ae5-f60ce113a05e
STIX ID: report--a11363df-9ff1-5733-8ae5-f60ce113a05e
Feed Name: CosmicBytez Labs
Threat Score
Microsoft's September 2026 cumulative updates (KB5124008 and KB5124012) introduced a regression causing domain-joined Windows 11 machines with Machine Identity Isolation enforcement to lose their AD secure channel after reboot and reject valid domain credentials; Microsoft acknowledged the issue, published a workaround (disable enforcement via policy or registry, reboot, and run Test-ComputerSecureChannel -Repair), and plans a future update to temporarily prevent enforcement until a permanent fix is delivered.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.