AD Kerberos RC4 detection and migration
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 8239722 · +1 −3 lines · also on GitHub
⋯ 5 unchanged lines
66
ms.author: daknappe
77
author: dknappettmsft
88
ms.reviewer: mapalko
9
−ms.date: 11/27/2025
9
+ms.date: 02/06/2026
1010
---
1111
1212
# Detect and remediate RC4 usage in Kerberos
⋯ 22 unchanged lines
3535
3636
> [!IMPORTANT]
3737
> Microsoft plans to disable RC4 use as the default assumed supported encryption type for Active Directory domain controllers by the end of the second quarter of 2026. To learn more about how to prepare for disabling RC4, see [How to manage Kerberos KDC usage of RC4 for service account ticket issuance changes related to CVE-2026-20833](https://support.microsoft.com/help/5073381).
38
−
39
−](https://support.microsoft.com/topic/how-to-manage-kerberos-kdc-usage-of-rc4-for-service-account-ticket-issuance-changes-related-to-cve-2026-20833-1ebcda33-720a-4da8-93c1-b0496e1910dc)
4038
4139
## Prerequisites
4240
⋯ 349 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:20 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.