Enterprise administrators managing Windows 11 environments are reporting widespread domain trust failures following the installation of the KB5124008 security update. Released on September 8, 2026, as part of the monthly Patch Tuesday cycle, the update is causing systems to lose their secure connection with Active Directory.
Technical diagnostics performed via the nltest /sc_query command typically return error 1786, specifically defined as ERROR_NO_TRUST_LSA_SECRET. This suggests a critical failure in how the Local Security Authority (LSA) handles the shared secret required to maintain a secure channel between the workstation and the domain controller.
Infrastructure Conflicts
The update has also caused collateral damage to filesystem-sharing protocols. Both the Windows Subsystem for Linux (WSL) and the Claude Cowork AI tool have seen file-sharing functionality broken by KB5124008.
On September 14, 2026, Microsoft released an out-of-band update, KB5129195, to address separate critical bugs involving USB audio devices and Remote Desktop Services.
Restoring Domain Trust
For IT professionals dealing with affected workstations, a multi-step workaround involving registry modification and a secure channel repair has proven effective.
Administrators have successfully restored connectivity by following these steps:
- Navigate to the registry path:
HKLM\SYSTEM\CurrentControlSet\Control\Lsa - Locate or create the DWORD value
MachineIdentityIsolationand set it to 0. - Once the registry is modified, a secure channel repair must be initiated.