Microsoft patch gives domain-joined Windows PCs trust issues

Microsoft's September cavalcade of cockups continued with confirmation that something is amiss with Active Directory domain logins. The issue, which affects Windows 11 versions 24H2, 25H2, and 26H1, was added to Microsoft's ever-lengthening list of known problems on September 16. It stems from changes to Machine Identity Isolation in the September 2026 security update (KB5124008). The problem is that Credential Guard-protected machine accounts might lose their secure channel with an on-premises