Technical Tip: Authentication with FSSO breaks after upgrading to Windows 11 22H2

[dbu]

Description	This article describes a possible workaround for FSSO authentication from Windows 11 clients.
Scope	Windows 11.
Solution	There are two issues observed with FSSO authentication after users upgrade to Win11. Starting in Windows 11, version 22H2, Windows Fast Start-up, and Credential Guard are enabled by default. Windows Fast Start-up.  It uses cached credentials and does not generate a new logon record in DC. Workaround. Disable the Fast Start-up: How to enable or disable fast startup on Windows 11 | Windows Central Credential Guard. Considerations and known issues when using Credential Guard - Windows Security | Microsoft Learn Workaround: Move to certificate-based authentication, like PEAP-TLS or EAP-TLS. For a more immediate, but less secure fix, disable Credential Guard. Configure Credential Guard - Windows Security | Microsoft Learn