ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 270/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 02:26 UTC Customize Public modeDiscuss ChangeIntel on Discord

AD Kerberos RC4 detection and migration

Timelines and exceptions · All guidance changes

Active Directory · Official Microsoft guidanceObserved changes retained

Retained observation

Source metadata changed; retained article content is unchanged.

Documentation metadata only

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 23 Oct 09:55 UTC
Observed by ChangeIntel
23 Oct 09:55 UTC
Source update metadata
13 Apr 17:34 UTC
First observed on this installation
5 Oct 17:50 UTC
Last successful check
25 Oct 22:58 UTC
Next check due
today 04:58 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of 23 Oct 09:55 UTC
Published timing needs confirmation January 2025 most recent · 21 months ago
  • 2 dates
  • 7 undated sections
  • 11 with conditions
  1. Audit / monitorJanuary 2025 Published timing is qualified; effectiveness is not confirmed.
  1. 3 years agoon or after
  2. 21 months agomonth windowupdate release · Patch Tuesday 14 Jan 2025Audit / monitor · unconfirmed

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

  • AES-SHA18 Nov 2022
  • DefaultDomainSupportedEncTypes
  • DefaultSupportedEncryptionTypes
  • Get-KerbEncryptionUsage
  • MSDS-SupportedEncryptionTypes
  • New-PSSession
  • SupportedEncryptionTypes

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 23 Oct 09:55 UTC; extracted 23 Oct 09:55 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Applicability or exceptions require review

0 date changes and 0 condition changes across 2 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 10

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/windowsserverdocs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:34 UTC.

  1. Update detect-remediate-rc4-kerberos.md Served on LearnView diff
  2. Minor fix to detect-remediate-rc4-kerberos.md View diff
  3. Update WindowsServerDocs/security/kerberos/detect-remediate-rc4-kerberos.md View diff
  4. Clarify default View diff
  5. Correct information in important notice View diff
  6. Detect and remediate RC4 usage in Kerberos View diff
1 metadata-only edit · author, dates or topic labels, no article text
  1. Updating ms.authors part 4 Metadata onlyView diff

Suggested by a shared curated topic and product; not a verified connection (6 items)

Retained observations

  • 23 Oct 09:55 UTC · shown above
  • 12 Oct 19:50 UTC

    1 removed passage (about 20 words). The changed wording mentions dates and deadlines. Review the source to confirm the effect.

  • 6 Oct 17:57 UTC

    Source metadata changed; retained article content is unchanged.

  • 5 Oct 17:50 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 02:26 UTC · 270 of 271 readable · 268 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.