ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 461/464 docs · 8/9 advisories · checked 00:50 UTC Customize Public modeDiscuss ChangeIntel on Discord

AD Kerberos RC4 detection and migration

Timelines and exceptions · All guidance changes

Active Directory · Official Microsoft guidanceObserved changes retained

Observed content change

1 removed passage (about 20 words). The changed wording mentions dates and deadlines. Review the source to confirm the effect.

May need admin actionCheck the dates against your plans.

Date or deadline wording
RemovedDetect and remediate RC4 usage in Kerberos
[removed: Applies to: ✅ Windows Server 2025, ✅ Windows Server 2022, ✅ Windows Server 2019, ✅ Windows Server 2016, ✅ Windows 11, ✅ Windows 10]

Microsoft's wording from Microsoft source, © Microsoft Corporation, under CC BY 4.0. ChangeIntel marks removed and added words, drops formatting and shortens long unchanged stretches.

Read the current Microsoft source · Link to this observation · Compare any two versions

Sections to inspect

  • Detect and remediate RC4 usage in Kerberos

Up to 12 section headings from retained before/after evidence. The current source may have changed again.

Why this was flagged

The changed words, with a few words around them, matched these rule categories: dates and deadlines. These matches identify subjects to assess; they do not establish a policy change or applicability.

Observation details · observed 12 Oct 19:50 UTC
Observed by ChangeIntel
12 Oct 19:50 UTC
Source update metadata
13 Apr 17:34 UTC
First observed on this installation
5 Oct 17:50 UTC
Last successful check
25 Oct 22:58 UTC
Next check due
today 04:58 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

This is an earlier observation; review the latest in My radar.

Timeline

From the capture of 12 Oct 19:50 UTC · an earlier observation
Published timing needs confirmation January 2025 most recent · 21 months ago
  • 2 dates
  • 7 undated sections
  • 11 with conditions
  1. Audit / monitorJanuary 2025 Published timing is qualified; effectiveness is not confirmed.
  1. 3 years agoon or after
  2. 21 months agomonth windowupdate release · Patch Tuesday 14 Jan 2025Audit / monitor · unconfirmed

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

  • AES-SHA18 Nov 2022
  • DefaultDomainSupportedEncTypes
  • DefaultSupportedEncryptionTypes
  • Get-KerbEncryptionUsage
  • MSDS-SupportedEncryptionTypes
  • New-PSSession
  • SupportedEncryptionTypes

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 12 Oct 19:50 UTC; extracted 22 Oct 18:57 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 10

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/windowsserverdocs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:34 UTC.

  1. Update detect-remediate-rc4-kerberos.md Served on LearnView diff
  2. Minor fix to detect-remediate-rc4-kerberos.md View diff
  3. Update WindowsServerDocs/security/kerberos/detect-remediate-rc4-kerberos.md View diff
  4. Clarify default View diff
  5. Correct information in important notice View diff
  6. Detect and remediate RC4 usage in Kerberos View diff
1 metadata-only edit · author, dates or topic labels, no article text
  1. Updating ms.authors part 4 Metadata onlyView diff

Retained observations

  • 23 Oct 09:55 UTC

    Source metadata changed; retained article content is unchanged.

  • 12 Oct 19:50 UTC · shown above
  • 6 Oct 17:57 UTC

    Source metadata changed; retained article content is unchanged.

  • 5 Oct 17:50 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 00:50 UTC · 271 of 271 readable · 269 fully read · documentation 461/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.