Domain-joined devices might lose their secure trust relationship with the domain

Microsoft lists this known issue for 4 Windows versions; its status is Resolved. It started with KB5124008, KB5124012. Microsoft resolved it in KB5124006, KB5124010.

Resolved1 version

Facts

Microsoft id
4990
Status
Resolved
Products
Windows 11, version 24H2, Windows 11, version 25H2, Windows 11, version 26H1, Windows 11, version 26H2
Versions
Windows 11, version 24H2, Windows 11, version 25H2, Windows 11, version 26H1, Windows 11, version 26H2
Originating KBs
KB5124008, KB5124012
Resolved by
KB5124006, KB5124010
First captured by us
(from our first import of this list)
Microsoft last modified
Source
Windows known issues · open the original at Microsoft

Status per Windows version

VersionStatusOriginating updateOpenedResolved
Windows 11, version 26H2Resolved KB5124010N/A2026-09-16 21:15 UTC2026-09-22 17:00 UTC
Windows 11, version 26H1Resolved KB5124006OS Build 28000.2954, KB5124012, 2026-09-082026-09-16 21:15 UTC2026-09-22 17:00 UTC
Windows 11, version 25H2Resolved KB5124010OS Build 26200.9445, KB5124008, 2026-09-082026-09-16 21:15 UTC2026-09-22 17:00 UTC
Windows 11, version 24H2Resolved KB5124010OS Build 26100.9445, KB5124008, 2026-09-082026-09-16 21:15 UTC2026-09-22 17:00 UTC

Microsoft says

After installing Windows 11, version 26H2, some Credential Guard protected machine accounts might lose their secure channel with an on-premises Active Directory (AD) domain.

Windows known issues,

Read Microsoft's full post

What Microsoft changed

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

  1. First version we captured ·

    As first seen: Resolved
    Status
    Resolved

    Seen by us · Microsoft's timestamp · Microsoft's page

Mentioning the same Microsoft ids

Last updated