ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

NTLMv1 SSO enforcement phases

Timelines and exceptions · All guidance changes

Windows · Official Microsoft guidanceObserved changes retained

Observed content change

3 edited passages (89 words changed). The changed wording mentions dates and deadlines, supported platforms, settings and controls. Review the source to confirm the effect.

May need admin actionCheck the dates against your plans; check the platforms and versions you run; check the settings the wording names.

Support wordingDate or deadline wording
EditedIntroduction
This article details changes [added: related to auditing and enforcement of blocking NTLMv1-derived cryptography] in [added: Windows. The changes apply to the] Windows [added: versions listed in Applies To (Windows] 11, versions 26H2, [added: 26H1,] 25H2, and 24H2[added: ,] and Windows Server [removed: 2025, focusing on the auditing] [added: 2025). The BlockNtlmv1SSO setting] and [removed: enforcement] [added: associated Audit and Enforce events are supported throughout the normal lifecycle] of [removed: blocking NTLMv1-derived cryptography.] [added: these Windows versions, and there are currently no plans to remove the setting.] These changes are part of the …
EditedIntroduction
[removed: The October 2026] Windows [removed: security update introduces a change that strengthens] [added: updates released on and after October 13, 2026, strengthen] NTLMv1 security by changing the internal …
EditedReferences
Date Change October [added: 19, 2026 The article was retitled and the Introduction section was revised. Windows 11, version 26H1 was added to the list of products this article] … 14, 2026 Edits across the article …

Short quotes of Microsoft's changed wording from Microsoft source, © Microsoft Corporation. Read the page for the full text.

Read the current Microsoft source · Link to this observation · Compare any two versions

Sections to inspect

Up to 12 section headings from retained before/after evidence. The current source may have changed again.

Why this was flagged

The changed words, with a few words around them, matched these rule categories: dates and deadlines, supported platforms, settings and controls. These matches identify subjects to assess; they do not establish a policy change or applicability.

Observation details · observed today 07:19 UTC
Observed by ChangeIntel
today 07:19 UTC
Source update metadata
today 05:38 UTC
Source review date
2026-10-19
First observed on this installation
12 Oct 19:19 UTC
Last successful check
today 19:44 UTC
Next check due
21 Oct 01:44 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of today 07:19 UTC
Current window October 2026 this window includes today · Enforced by default
  1. Audit / monitorAugust 2025 Events or warnings only; nothing is blocked
  2. Audit / monitorand later; update release September 2025 Published timing is qualified; effectiveness is not confirmed.
  3. November 2025
  4. Enforced by defaultOctober 2026 Published timing is qualified; effectiveness is not confirmed.
  5. Enforced by defaultafter 13 Oct 2026 Published timing is qualified; effectiveness is not confirmed.
  6. Enforced14 Oct 2026 Now: Enforced; the override no longer helps
  1. 9 months agoyear windowlater in
  2. 13 months agomonth windowlateAudit / monitor
  3. 12 months agomonth windowupdate release · Patch Tuesday 9 Sep 2025Audit / monitor · unconfirmed
  4. 10 months agomonth window
  5. this window includes todaymonth windowupdate release · Patch Tuesday 13 Oct 2026Enforced by default · unconfirmed
  6. 7 days agoafterEnforced by default · unconfirmed
  7. 6 days agoEnforced
  8. 1 days ago

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

Requirements, exceptions and scope

  • IntroductionScope1 passage
    BlockNtlmv1SSO
    This article details changes related to auditing and enforcement of blocking NTLMv1-derived cryptography in Windows. The changes apply to the Windows versions listed in Applies…
  • BackgroundExceptionScope4 conditions2 passages
    MS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential Guard
  • New registry keyRequirement1 passage
    BlockNtlmv1SSO
  • Rollout of changesExceptionScope1 condition2 passages
    Sign-OnWi-FiMS-CHAPv2
  • Preparing for Enforce modeRecommendation1 passage
    MS-CHAPv2Sign-OnWi-Fi
  • Temporary security exceptionRequirementExceptionRecommendation2 conditions2 passages
    Sign-On
  • Frequently asked questions (FAQ)ExceptionScope2 conditions2 passages
    Sign-OnWi-FiMS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential Guard

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. New dated step Introductionseen by ChangeIntel
    after October 13, 2026
  2. No longer on the page Introductionseen by ChangeIntel
    October 2026
  3. Scope added Introductionseen by ChangeIntel
  4. Scope added Referencesseen by ChangeIntel
    October 19, 2026
  5. Exception added Backgroundseen by ChangeIntel
  6. No longer on the page Backgroundseen by ChangeIntel
  7. New dated step Introductionseen by ChangeIntel
    October 2026
  8. Exception added Rollout of changesseen by ChangeIntel
  9. Exception added Temporary security exceptionseen by ChangeIntel
  10. No longer on the page Timelineseen by ChangeIntel
    October 2026
  11. New dated step Backgroundseen by ChangeIntel
    August 2025
  12. New dated step Changesseen by ChangeIntel
    October 2026, October 13, 2026
14 earlier changes
  1. New dated step New registry keyseen by ChangeIntel
    August 2025
  2. New dated step New registry keyseen by ChangeIntel
    October 2026, October 13, 2026
  3. New dated step Referencesseen by ChangeIntel
    October 14, 2026, October 2026
  4. New dated step Rollout of changesseen by ChangeIntel
    October 2026, October 13, 2026
  5. No longer on the page Rollout of changesseen by ChangeIntel
    September 2025 and later
  6. No longer on the page Rollout of changesseen by ChangeIntel
    October 2026
  7. New dated step Rollout of changesseen by ChangeIntel
    later in 2025, September 2025 and later
  8. New dated step Timelineseen by ChangeIntel
    October 2026, October 2026
  9. Recommendation added Preparing for Enforce modeseen by ChangeIntel
  10. Requirement added Restartin New registry keyseen by ChangeIntel
  11. Requirement added Temporary security exceptionseen by ChangeIntel
  12. Scope added Backgroundseen by ChangeIntel
  13. Scope added Frequently asked questions (FAQ)seen by ChangeIntel
  14. Scope added Rollout of changesseen by ChangeIntel
Observed history and review priority

Captured today 07:19 UTC; extracted today 07:19 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.

Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Applicability or exceptions require review · A published date window is near

0 date changes and 0 condition changes across 2 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 3

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Retained observations

  • today 07:19 UTC · shown above
  • 19 Oct 00:53 UTC

    26 new passages (about 560 words), 12 edited passages (133 words changed), 3 removed passages (about 70 words). The changed wording mentions dates and deadlines, defaults, prerequisites, mitigations, settings and controls. Review the source to confirm the effect.

  • 12 Oct 19:19 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026
  1. 20 Oct 2026 References (2)19 Oct 2026
  2. 20 Oct 2026 IntroductionOctober 2026 · Enforced by default, conditional → 13 Oct 2026 or later · Enforced by default, conditional
  3. 20 Oct 2026 Changes13 Oct 2026 · Enforced by default, conditional → October 2026 · Enforced by default, conditional
  4. 20 Oct 2026 SummaryMicrosoft's guidance publishes 7 dates, from 2025 to 14 Oct 2026 (References). → Microsoft's guidance publishes 8 dates, from 2025 to 19 Oct 2026 (References).
  5. 19 Oct 2026 TimelineAugust 2025 · Audit / monitor, tentative → No longer listed in this observation. Previously: August 2025 · Audit / monitor, tentative
  6. 19 Oct 2026 Settings namedBlockNTLMv1SSO, BlockNtlmv1SSO, Credential Guard → BlockNtlmv1SSO, BlockNTLMv1SSO, Credential Guard, MS-CHAPv2, Sign-On, Wi-Fi, EAP-MSCHAPv2, PEAP-MSCHAPv2
  7. 19 Oct 2026 References14 Oct 2026 · Enforced
  8. 19 Oct 2026 Changes13 Oct 2026 · Enforced by default, conditional
  9. 19 Oct 2026 IntroductionOctober 2026 · Enforced by default, conditional
  10. 19 Oct 2026 Begin rollout of changes to Windows Server 2025November 2025, tentative → November 2025
  11. 19 Oct 2026 Rollout of changes (2)October 2026 · Enforced by default, tentative, conditional → September 2025 or later · Audit / monitor
  12. 19 Oct 2026 BackgroundAugust 2025 · Audit / monitor
Show 2 more recent changes
  1. 19 Oct 2026Rollout of changes September 2025 or later · Audit / monitor → 2025
  2. 19 Oct 2026Summary Microsoft's guidance publishes 4 dates, from August 2025 to October 2026 (Rollout of changes). → Microsoft's guidance publishes 7 dates, from 2025 to 14 Oct 2026 (References).

The most recent 100 field changes are listed. Complete recorded revisions are kept separately.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.