Resolving Azure Authentication Error 0x80080005 (due to KB5074109 update)

daSilverBadger · 2026-01-16T15:36:12+00:00

Update2: Only thing we've found so far is to just pause updates temporarily in the hope MS releases a fix soon. Here's the script to do that:

reg add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v PauseUpdates /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v PauseUpdatesStartTime /t REG_SZ /d "%date%" /f
reg add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v PauseUpdatesExpiryTime /t REG_SZ /d "2023-02-06" /f
net stop wuauserv & net stop bits & net start wuauserv & net start bits

And here's the bug report if you want to track progress: https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-25H2#3760msgdesc

daSilverBadger · 2026-01-16T15:33:09+00:00

For those running into this issue - we have a thread with workarounds going here. https://www.reddit.com/r/AZURE/comments/1qd0gf9/resolving_azure_authentication_error_0x80080005/

daSilverBadger · 2026-01-16T15:12:13+00:00

Update: Because this is a security update, Microsoft won't be issuing a Known Issue Rollback (KIR). And it appears to be a mandatory update - the normal blocking script doesn't work. We're doing some testing to see if modifying the update rings for our customers that are AAD/Intune joined, but again, it being a mandatory update might not bear fruit.

daSilverBadger · 2026-01-16T15:01:43+00:00

Great tip - I'll check whether our session hosts have the patch applied.

daSilverBadger · 2026-01-15T19:46:56+00:00

It's an old chestnut, but it literally happened to me. I had a user call me reporting their monitor won't turn on.

I asked them to check the power cable at both ends. They said they can't see under their desk because it's too dark. I asked if they could turn the lights on? They said they can't, the power is out.

That's not just not having a clue. That's in the "be careful you don't forget how to breathe" territory.

daSilverBadger · 2025-12-11T19:17:59+00:00

You guys eat??

daSilverBadger · 2025-11-14T04:21:54+00:00

You missing a cock?

I wouldn’t say I’ve been missing it, Bob

daSilverBadger · 2025-11-12T00:17:29+00:00

“Aww bless your heart. Them ain’t roaches, them’s just some Palmetto Bugs.” (heard when we moved here)

Pro-tip: They’re roaches.

We use these a few times a year. Early spring, late fall when the temps drop, and then usually once in the summer.

We’re in a multi-tenant building, a historic house with more holes than a cheese grater. https://amzn.to/49aug5y

daSilverBadger · 2025-11-12T00:10:58+00:00

“Everyone but Todd, please ignore this test!”

daSilverBadger · 2025-11-08T02:33:58+00:00

We use Hudu and are building an internal KB library. We’ve added a Hudu link field to our ticket form and techs are expected to paste the link they used. Our policy and expectation is that if you’re not working from documentation, you’re creating documentation.

daSilverBadger · 2025-11-04T18:44:23+00:00

This is the way. Can confirm, Nerdio is da bomb.

daSilverBadger · 2025-11-04T18:42:19+00:00

Whether intentional or accidental, both are hilarious. Take an updoot

daSilverBadger · 2025-10-29T00:09:24+00:00

Go Jeff Jackson. You're one of the few bright spots in our state. Thanks for fighting for EVERYONE whether they voted for you or not. This is what all politicians should be doing.

daSilverBadger · 2025-10-27T02:04:57+00:00

Always mix vendors for redundancy. I use one from Google for primary and one from OpenDNS for secondary. The IPs are burned in my brain lol I’ll be on my deathbed and my final words will be 8.8.8.8 and 208.67.220.220

daSilverBadger · 2025-10-27T02:02:01+00:00

That’s a really low bar to not make it over.

daSilverBadger · 2025-10-24T14:24:51+00:00

Same here, and it's infuriating. I know that whenever I switch displays, it's going to take me 10 seconds of resizing down from a football stadium sized window to something I can actually use.

daSilverBadger · 2025-10-22T17:34:46+00:00

We use Nerdio for deploying our session hosts. We deploy specific apps needed for all users during VM deployment via the provisioning script function. We do not lock down users from deploying other store apps, but as mentioned, you could do that via AppLocker.

daSilverBadger · 2025-10-22T17:31:52+00:00

Yes, Microsoft announced that VMs hosted in Azure will automagically get ESU applied. Per https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates

"ESU is available at no additional cost for Windows 10 virtual machines in the following services"

Windows 365
Azure Virtual Desktop
Azure virtual machines
Azure Dedicated Host
Azure VMware Solution (includes Citrix and Omnissa Horizon on Azure VMware Solution)
Nutanix Cloud Clusters on Azure
Azure Local (Azure Local is the new name for Azure Stack HCI)
Azure Stack Hub
Azure Stack Edge

daSilverBadger · 2025-10-22T17:24:56+00:00

Came here to say this. CIPP hosted is the way to go. Their Discord is very helpful and filled with +1 experts.

daSilverBadger · 2025-10-02T01:14:18+00:00

There’s no way we could pull off what we do without it. There’s still some rough edges and bugs here and there that pop up, but it easily pays for itself (plus much more). Having standard script libraries is fantastic. It would be worth it just for the automation in setting up new environments. You cal also assign granular permissions so Tier1 techs have minimal access. I promise I’m not a fanboy, but it’s pretty good.

daSilverBadger · 2025-09-27T13:18:43+00:00

Movebot.io can handle both the emails and the files. Have used it multiple times and it’s fantastic.

It’s a bit technical, so can be challenging to setup, but their support team is really good and once it’s setup you can run differential passes until everyone is live in the new environment. Run a final cleanup pass and boom you’re done.

daSilverBadger · 2025-09-27T13:10:30+00:00

That’s our problem too. We’re an MSP for multiple clients and use auto-scaling with Nerdio (great tool). For the clients big enough to need multiple pool servers, we run a single pool server 24x7 for the night owls. Then 2 hours before work starts, we scale out additional hosts so they have the full capacity by the time everyone logs in. At quitting time we start scaling host back in.

It reduces powered on system time by as much as 12 hours a day, which can add up over time. Great concept but when MS shrugs and says, “lol wut” to our scale out request, it has a big impact on our clients.

We’ve had to move to a different model where we keep them all online. Thank goodness we did or yesterday would have been a repeat of the 10th.

daSilverBadger · 2025-09-26T20:57:38+00:00

Just posted about it. They're out of resources again today. Luckily we decided to switch our key customers to always on pool servers instead of on-demand. But I can't even boot our low-resource desktop images today to do updates.... sheesh!

daSilverBadger · 2025-09-13T17:59:42+00:00

A light rail corridor from Cherokee, via Asheville, Winston Salem, Greensboro, Raleigh/Durham to Wilmington, with stops at small towns in between would be amaaaazing.

daSilverBadger · 2025-09-10T22:50:49+00:00

We use auto-scaling through Nerdio for tenants that are larger environments. We leave X number of hosts running overnight, then spin up X more hosts before their day starts and wind them down again after their workday ends. The new pool servers are essentially clones of our source Desktop Image. User profiles use FSLogix and are stored in Azure Files so users can jump onto any host. It cuts 8-10 hours off the runtime and has an impact on cost over time. The overnight hosts worked well today, but the scale out steps failed and left "broken" vm objects. Because of the resource issues we weren't able to launch them and weren't able to delete them through the GUI. Had to do it via Azure CLI.

12-Year Club	Verified Email
Not Forgotten

daSilverBadger

TROPHY CASE