GoKawiilMicrosoft probes KB5124008 update for breaking Active Directory domain trust
Microsoft confirmed it is investigating reports that the Windows 11 KB5124008 security update is severing secure channel connections between domain-joined PCs and Active Directory after a reboot, locking out users with valid credentials. Administrators on Reddit and Microsoft's Q&A forums say the problem appears tied to the Windows Machine Identity Isolation feature when running in audit or enforcement mode, and that uninstalling the patch and repairing the domain trust restores access.