Recorded 18 Oct 2026 at 23:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Guidance timelinesupport.microsoft.com
Kerberos NTAuth protections
Microsoft's guidance publishes 7 dates, from April 2025 to October 2025 (October 2025: Enforcement mode).
What it said
- Protections for CVE-2025-26647 (Kerberos Authentication)
- April 2025 or later · Audit / monitor, conditional
- Protections for CVE-2025-26647 (Kerberos Authentication) (2)
- 8 Apr 2025 or later · Audit / monitor, tentative, conditional
- Protections for CVE-2025-26647 (Kerberos Authentication) (3)
- May 2025 or later · Audit / monitor, conditional
- Protections for CVE-2025-26647 (Kerberos Authentication) (4)
- 9 May 2025 · Enforced, conditional
- July 2025: Enforced by Default phase
- July 2025 or later · Enforced by default, conditional
- Protections for CVE-2025-26647 (Kerberos Authentication) (5)
- 22 Jul 2025 · Audit / monitor, conditional
- October 2025: Enforcement mode
- October 2025 or later · Enforced
- Settings named
- AllowNtAuthPolicyBypass, AS-REQ
Recorded links
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.