Microsoft patch gives domain-joined Windows PCs trust issues

Machine Identity Isolation policies can reject valid credentials unless controllers meet the Server 2025 functional level