Windows 11 / Intelligence workspace
Snapshot · 2026-10-25
IssuesKB5124008Evidence
Windows update intelligence

Domain-joined devices may lose their secure trust relationship

Some Credential Guard protected machine accounts lost their secure channel with on-premises AD domains, blocking interactive sign-in with valid credentials.

ResolvedC3 · Microsoft confirmedMajor impactSnapshot checked 2026-10-25

Does this match your environment?

Windows scope
24H2 / 25H2
Architecture
Unknown — not universal
App / driver
Active Directory / Credential Guard
Conditions
Credential Guard protected machine accounts in on-premises Active Directory domains; devices without Credential Guard are not stated as affected.

A matching version is only a starting point. This page does not diagnose an individual device.

Evidence & current resolution

Microsoft lists this scope as resolved on 2026-09-22. Resolving update: KB5124010.

Microsoft official evidence
Evidence ID
official-domain-trust-loss
Source groups
1 · official publication
Evidence basis
Manually reviewed public source; no independent device test
Evidence permalink

Suggest a correction

Private review notes are stored in your workspace. They do not change published evidence or contact an external editor.

Recorded timeline

2026-09-08

Originating update released

KB5124008
2026-09-22

Official resolution recorded

KB5124010

2026-10-25

Snapshot reviewed

Added to this curated collection. Earlier acknowledgement time was not independently captured.

Follow official guidance for your environment. We do not provide automatic rollback or security-disable actions.