**Windows Domain Login Issues Plague Enterprise Systems After Latest Security Updates**
A major authentication problem has been discovered in some enterprise systems running Windows 11 after installing the latest security updates. Users are unable to log in with valid domain credentials, causing widespread disruptions and frustration for IT administrators.
The issue is linked to a Windows security feature called Machine Identity Isolation (MIIS), which was enabled by the September 2026 security updates. MIIS is designed to improve security by isolating machine identities on enterprise networks, but it appears to be causing more problems than it solves in this case. The problem affects users who have installed the KB5124008 or KB5124012 updates, and it’s particularly prevalent in environments connected to Windows Server 2025 domain controllers.
According to Microsoft, the issue occurs when MIIS is set to enforcement mode, which breaks domain trust relationships on affected systems. This causes valid domain credentials to be rejected, resulting in error messages and sign-in issues for users. The problem is exacerbated by the fact that disabling MIIS requires administrators to unjoin and rejoin devices to the Windows domain.
Microsoft has confirmed that this authentication issue is a direct result of the September 2026 security updates, which enable MIIS in enforcement mode without explicitly enabling it. While the company is still working on a permanent fix for this problem, a temporary workaround has been shared to help affected customers bypass these authentication issues.
To disable MIIS and resolve the login problems, administrators must follow specific steps depending on how the feature was enabled in their environment. For instance, if MIIS was enabled through Intune or group policy, it can be disabled using those same management tools. If it was enabled directly in the Windows registry, a series of registry edits are required to disable the feature.
It’s worth noting that Microsoft has also released out-of-band updates to address other issues caused by this month’s security updates, including Remote Desktop Services failures and Hyper-V problems. However, these emergency fixes did not resolve all audio-related issues introduced by the September 2026 updates.
**What Does This Mean for You?**
If you’re an IT administrator or simply a Windows user who relies on domain credentials to access your system, it’s essential to be aware of this issue and take action if necessary. If you’ve installed the latest security updates and are experiencing authentication problems, try disabling MIIS using one of the temporary workarounds outlined above. Remember that these steps should only be used as a temporary measure until Microsoft releases a permanent fix.
To avoid similar issues in the future, it’s crucial to stay informed about the latest Windows updates and their potential impact on your system. Regularly review security advisories from Microsoft and keep an eye out for workarounds or patches that may be required to mitigate known problems. By staying vigilant and proactive, you can minimize downtime and ensure business continuity even in the face of widespread authentication issues.
Source: Bleeping Computer — 2026-09-17