Q: Windows 11 22H2 Logon Failure

We don’t recommend upgrading to Windows 11 22H2 at the moment for domain-joined computers

Issue

Windows 11 Computers running feature update 22H2 cannot logon when the default domain is ATHENA.MIT.EDU.

Temp Fix:

Prepend the username with WIN\ to force a user to logon to the WIN domain.

Or you can use the UPN, “KerbID@mit.edu” as the login name.

This will not allow the user to get Kerberos tickets but will allow them to logon to the computer. The Kerberos for Windows client can be used to get a Kerberos ticket.

Long-term fix:

An update to the encryption level for Kerberos authentication will be implemented in the future.