NTLMv1 SSO enforcement phases
Timelines and exceptionsTimeline
From the capture of 19 Oct 00:53 UTC · an earlier observation- 7 dates
- 6 undated sections
- 12 with conditions
- 22 recorded changes
- Audit / monitorAugust 2025 Events or warnings only; nothing is blocked
- Audit / monitorand later; update release September 2025 Published timing is qualified; effectiveness is not confirmed.
- November 2025
- Enforced by defaultOctober 2026 Published timing is qualified; effectiveness is not confirmed.
- Enforced by default13 Oct 2026 Published timing is qualified; effectiveness is not confirmed.
- Enforced14 Oct 2026 Now: Enforced; the override no longer helps
- 9 months agoyear windowlater in
- Rollout of changesMilestone
- 13 months agomonth windowlateAudit / monitor
- BackgroundMilestone
- New registry keyMilestone
BlockNtlmv1SSO - TimelineMilestone
- 12 months agomonth windowupdate release · Patch Tuesday 9 Sep 2025Audit / monitor · unconfirmed
- Rollout of changesMilestone
- 10 months agomonth window
- this window includes todaymonth windowupdate release · Patch Tuesday 13 Oct 2026Enforced by default · unconfirmed
BlockNtlmv1SSOCredential GuardWi-FiMS-CHAPv2BlockNtlmv1SSOSign-OnBlockNTLMv1SSOBlockNtlmv1SSOBlockNtlmv1SSOSign-On- ReferencesMilestone
Wi-FiMS-CHAPv2
- 8 days agoEnforced by default · unconfirmed
BlockNtlmv1SSOSign-OnBlockNTLMv1SSOBlockNtlmv1SSO
- 7 days agoEnforced
- ReferencesMilestone
Wi-FiMS-CHAPv2
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
BlockNtlmv1SSOOverrideAugust 2025October 202613 Oct 2026BlockNTLMv1SSOOverrideOctober 202613 Oct 2026Credential GuardOverrideOctober 2026MS-CHAPv2Overridestops helping 14 Oct 2026October 202614 Oct 2026Sign-OnOverrideOctober 202613 Oct 2026Wi-FiOverridestops helping 14 Oct 2026October 202614 Oct 2026EAP-MSCHAPv2PEAP-MSCHAPv2
Requirements, exceptions and scope
MS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential GuardBlockNtlmv1SSOSign-OnWi-FiMS-CHAPv2MS-CHAPv2Sign-OnWi-FiSign-OnSign-OnWi-FiMS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential Guard
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
-
-
October 2026
-
-
-
October 2026 -
August 2025
-
October 2026, October 13, 2026
-
August 2025
-
October 2026, October 13, 2026
-
October 14, 2026, October 2026
-
October 2026, October 13, 2026
10 earlier changes
-
September 2025 and later -
October 2026 -
later in 2025, September 2025 and later
-
October 2026, October 2026
-
-
-
-
-
-
Observed history and review priority
Captured 19 Oct 00:53 UTC; extracted 19 Oct 00:54 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 3
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 20 Oct 07:19 UTC · 25 candidates
- 19 Oct 00:53 UTC · 23 candidates
- 12 Oct 19:19 UTC · 8 candidates