NTLMv1 SSO enforcement phases
Observed content change
The page title or its body outside the tracked passages changed. Review the source for its effect.
Read to decideThe wording changed without matching a rule; read the changed passages to decide.
Read the current Microsoft source · Link to this observation · Compare any two versions
Observation details · observed 21 Oct 08:12 UTC
- Observed by ChangeIntel
- 21 Oct 08:12 UTC
- Source update metadata
- 21 Oct 02:45 UTC
- Source review date
- 2026-10-20
- First observed on this installation
- 12 Oct 19:19 UTC
- Last successful check
- 25 Oct 22:10 UTC
- Next check due
- today 04:10 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
This is an earlier observation; review the latest in My radar.
Timeline
From the capture of 21 Oct 08:12 UTC · an earlier observation- 8 dates
- 7 undated sections
- 12 with conditions
- 26 recorded changes
- Audit / monitorAugust 2025 Events or warnings only; nothing is blocked
- Audit / monitorand later; update release September 2025 Published timing is qualified; effectiveness is not confirmed.
- November 2025
- Enforced by defaultOctober 2026 Published timing is qualified; effectiveness is not confirmed.
- Enforced by defaultafter 13 Oct 2026 Published timing is qualified; effectiveness is not confirmed.
- Enforced14 Oct 2026 Now: Enforced; the override no longer helps
- 9 months agoyear windowlater in
- Rollout of changesMilestone
- 14 months agomonth windowlateAudit / monitor
- BackgroundMilestone
- New registry keyMilestone
BlockNtlmv1SSO - TimelineMilestone
- 13 months agomonth windowupdate release · Patch Tuesday 9 Sep 2025Audit / monitor · unconfirmed
- Rollout of changesMilestone
- 11 months agomonth window
- this window includes todaymonth windowupdate release · Patch Tuesday 13 Oct 2026Enforced by default · unconfirmed
BlockNtlmv1SSOSign-OnBlockNTLMv1SSOBlockNtlmv1SSOBlockNtlmv1SSOSign-On- ReferencesMilestone
Wi-FiMS-CHAPv2
- 13 days agoafterEnforced by default · unconfirmed
BlockNtlmv1SSOCredential GuardWi-FiMS-CHAPv2BlockNtlmv1SSOSign-OnBlockNTLMv1SSOBlockNtlmv1SSO
- 12 days agoEnforced
- ReferencesMilestone
Wi-FiMS-CHAPv2
- 7 days ago
- ReferencesScope
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
BlockNtlmv1SSOOverrideAugust 2025October 202613 Oct 2026BlockNTLMv1SSOOverrideOctober 202613 Oct 2026Credential GuardOverride13 Oct 2026MS-CHAPv2Overridestops helping 14 Oct 2026October 202613 Oct 202614 Oct 2026Sign-OnOverrideOctober 202613 Oct 2026Wi-FiOverridestops helping 14 Oct 2026October 202613 Oct 202614 Oct 2026EAP-MSCHAPv2PEAP-MSCHAPv2
Requirements, exceptions and scope
BlockNtlmv1SSOMS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential GuardBlockNtlmv1SSOSign-OnWi-FiMS-CHAPv2MS-CHAPv2Sign-OnWi-FiSign-OnSign-OnWi-FiMS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential Guard
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
after October 13, 2026
-
October 2026 -
-
October 19, 2026
-
-
-
October 2026
-
-
-
October 2026 -
August 2025
-
October 2026, October 13, 2026
14 earlier changes
-
August 2025
-
October 2026, October 13, 2026
-
October 14, 2026, October 2026
-
October 2026, October 13, 2026
-
September 2025 and later -
October 2026 -
later in 2025, September 2025 and later
-
October 2026, October 2026
-
-
-
-
-
-
Observed history and review priority
Captured 21 Oct 08:12 UTC; extracted 22 Oct 18:56 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 5
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 23 Oct 09:22 UTC · 25 candidates
- 21 Oct 08:12 UTC · 25 candidates
- 20 Oct 07:19 UTC · 25 candidates
- 19 Oct 00:53 UTC · 23 candidates
- 12 Oct 19:19 UTC · 8 candidates
Retained observations
- 23 Oct 09:22 UTC
Source metadata changed; retained article content is unchanged.
- 21 Oct 08:12 UTC · shown above
- 20 Oct 07:19 UTC
3 edited passages (89 words changed). The changed wording mentions dates and deadlines, supported platforms, settings and controls. Review the source to confirm the effect.
- 19 Oct 00:53 UTC
26 new passages (about 560 words), 12 edited passages (133 words changed), 3 removed passages (about 70 words). The changed wording mentions dates and deadlines, defaults, prerequisites, mitigations, settings and controls. Review the source to confirm the effect.
- 12 Oct 19:19 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026- 20 Oct 2026 · 07:20:24 UTC References (2)19 Oct 2026
- 20 Oct 2026 · 07:20:24 UTC IntroductionOctober 2026 · Enforced by default, conditional → 13 Oct 2026 or later · Enforced by default, conditional
- 20 Oct 2026 · 07:20:24 UTC Changes13 Oct 2026 · Enforced by default, conditional → October 2026 · Enforced by default, conditional
- 20 Oct 2026 · 07:20:24 UTC SummaryMicrosoft's guidance publishes 7 dates, from 2025 to 14 Oct 2026 (References). → Microsoft's guidance publishes 8 dates, from 2025 to 19 Oct 2026 (References).
- 19 Oct 2026 · 00:55:08 UTC TimelineAugust 2025 · Audit / monitor, tentative → No longer listed in this observation. Previously: August 2025 · Audit / monitor, tentative
- 19 Oct 2026 · 00:55:08 UTC Settings namedBlockNTLMv1SSO, BlockNtlmv1SSO, Credential Guard → BlockNtlmv1SSO, BlockNTLMv1SSO, Credential Guard, MS-CHAPv2, Sign-On, Wi-Fi, EAP-MSCHAPv2, PEAP-MSCHAPv2
- 19 Oct 2026 · 00:55:08 UTC References14 Oct 2026 · Enforced
- 19 Oct 2026 · 00:55:08 UTC Changes13 Oct 2026 · Enforced by default, conditional
- 19 Oct 2026 · 00:55:08 UTC IntroductionOctober 2026 · Enforced by default, conditional
- 19 Oct 2026 · 00:55:08 UTC Begin rollout of changes to Windows Server 2025November 2025, tentative → November 2025
- 19 Oct 2026 · 00:55:08 UTC Rollout of changes (2)October 2026 · Enforced by default, tentative, conditional → September 2025 or later · Audit / monitor
- 19 Oct 2026 · 00:55:08 UTC BackgroundAugust 2025 · Audit / monitor
Show 2 more recent changes
- 19 Oct 2026 · 00:55:08 UTCRollout of changes September 2025 or later · Audit / monitor → 2025
- 19 Oct 2026 · 00:55:08 UTCSummary Microsoft's guidance publishes 4 dates, from August 2025 to October 2026 (Rollout of changes). → Microsoft's guidance publishes 7 dates, from 2025 to 14 Oct 2026 (References).
The most recent 100 field changes are listed. Complete recorded revisions are kept separately.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.