CyberHappenings logo

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Windows Authentication Failures Due to Duplicate Security Identifiers

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Windows updates released since August 29, 2025, have introduced authentication failures on systems with duplicate Security Identifiers (SIDs). These updates enforce stricter SID checks, causing Kerberos and NTLM authentication to fail on affected devices. The issue impacts Windows 11 (24H2 and 25H2) and Windows Server 2025, leading to various login and access problems. Duplicate SIDs often result from improperly cloned or duplicated Windows installations. Microsoft recommends rebuilding affected systems using supported cloning methods or applying a temporary Group Policy fix obtained through Microsoft Support.

Timeline

  1. 21.10.2025 19:56 1 articles · 23h ago

    Windows updates released since August 29, 2025, cause authentication failures due to duplicate SIDs

    Windows updates released since August 29, 2025, enforce stricter SID checks, leading to authentication failures on devices with duplicate SIDs. This issue impacts Windows 11 24H2, Windows 11 25H2, and Windows Server 2025. Affected systems experience various login and access problems, including failed remote desktop connections and 'access denied' errors. Duplicate SIDs are often created when cloning or duplicating Windows installations without using the Sysprep tool. Microsoft recommends rebuilding affected systems using supported cloning methods or applying a temporary Group Policy fix.

    Show sources

Information Snippets