Is KB5124008 Breaking Domain Trust on Windows 11 Clients?
Asked by
MellowCedar47
Has anyone seen domain trust or machine secure-channel problems after installing KB5124008 on a Windows 11 25H2 client? In my environment, the domain controllers are running Windows Server 2019 and have not been patched yet. After installing the update and rebooting, I could still sign in with domain credentials, but Test-ComputerSecureChannel returned false and reported that the secure channel was broken. However, nltest /sc_query:domain reported a successful connection to the domain controller. Running Test-ComputerSecureChannel -Repair restored the secure channel, and later checks returned True. I'm trying to determine whether this is a real update-related issue or an isolated false alarm before rolling the update out to more clients.
Answers
I saw something similar after installing KB5124008 on a Windows 11 25H2 workstation while the domain controllers were still on Server 2019. Test-ComputerSecureChannel reported a broken trust, even though nltest /sc_query:domain showed a healthy Netlogon connection and successful communication with the DC. Running Test-ComputerSecureChannel -Repair fixed it. I’m continuing to test other machines to see whether the problem is reproducible or just a misleading status result.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions