Windows 11 25H2 duplicate SID authentication issue - KB5070568 - LsaSrv Event ID 6167. I need the special Group Policy mitigation referenced in KB5070568.

Question

Windows 11 25H2 duplicate SID authentication issue - KB5070568 - LsaSrv Event ID 6167. I need the special Group Policy mitigation referenced in KB5070568.

Hakan Akbulak 0

Hello,

I need assistance with a confirmed Windows 11 25H2 duplicate SID authentication issue.

Reference: Microsoft KB5070568

Two Windows 11 Pro 25H2 computers, BANKOPC1 and BANKOPC2, have duplicate machine SIDs.

Both machines have the following machine SID:

[Moderator note: PII removed]

BANKOPC2 cannot access SMB shares on BANKOPC1.

BANKOPC1 logs:

Provider: LsaSrv

Event ID: 6167

The event message states:

"There is a partial mismatch in the machine ID."

The event also indicates that this can occur when a machine has been cloned without using Sysprep.

A third workstation can access the same SMB share on BANKOPC1 successfully.

Therefore, we have confirmed that the issue matches the duplicate SID authentication issue documented in KB5070568.

Rebuilding BANKOPC2 is currently not operationally feasible.

According to KB5070568, Microsoft provides a special Group Policy as a temporary mitigation.

We specifically request the special Group Policy mitigation referenced in KB5070568 and its implementation instructions.

Please escalate this case to the appropriate Windows Support team if required.

The issue has already been confirmed as a duplicate SID issue.

We have confirmed identical machine SIDs and LsaSrv Event ID 6167.

I am specifically requesting the special Group Policy mitigation documented in KB5070568.

Please escalate the case to the Windows engineering/support team that can provide this policy.

0 yorum

1 yanıt

Yanıtınız

Answer 1

This is posted in the Turkish section, but since you are using English, the content below has been written in this language. Let me know if you want to change to another.

Hi Hakan Akbulak,

As referenced in the SID authentication issue of KB5070568, only two supported ways to address this are currently documented. Since rebuilding BANKOPC2 option is not operationally feasible, I understand why you are looking specifically for the Group Policy workaround mentioned.

That said, I must note that Microsoft Q&A is just a user-to-user support forum. Contributors here cannot provide such information or escalate this request to the Windows engineering team. In addition, the article also specifically stated that the package must be obtained through Microsoft’s Support for business.

If that Business route is not available to you, you can still try contacting Microsoft Support for personal users. However, please be prepared for the possibility that they may not be able to provide a mitigation that Microsoft specifically directs through Business Support:

Visit Contact Us - Microsoft Support > Sign in
Enter / choose an issue > Get Help to make request
Scroll down > click Contact Support to connect to an agent
Select a category > continue and you should reach the chat option.
If you don't see it, go through another category (e.g. Billings and payments...)

Kullanıcının resmi

Note: The support contact team only works at certain times, so if the last window shows that it's unavailable, try opening it again the next day. If you prefer phone support, you can leave a phone number. This way, they can call you and help you.

If neither support route can provide the policy, then unfortunately there is no other Microsoft-documented workaround I can point you to at present. You either need to rebuild/reimage BANKOPC2 when operationally possible, or wait for any further fix or publicly available mitigation from Microsoft.