ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 415/439 docs · checked 23:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

NTLMv1 SSO enforcement phases

Timelines and exceptions

Timeline

From the capture of 20 Oct 07:19 UTC
Current window October 2026 this window includes today · Enforced by default
  1. Audit / monitorAugust 2025 Events or warnings only; nothing is blocked
  2. Audit / monitorand later; update release September 2025 Published timing is qualified; effectiveness is not confirmed.
  3. November 2025
  4. Enforced by defaultOctober 2026 Published timing is qualified; effectiveness is not confirmed.
  5. Enforced by defaultafter 13 Oct 2026 Published timing is qualified; effectiveness is not confirmed.
  6. Enforced14 Oct 2026 Now: Enforced; the override no longer helps
  1. 9 months agoyear windowlater in
  2. 13 months agomonth windowlateAudit / monitor
  3. 12 months agomonth windowupdate release · Patch Tuesday 9 Sep 2025Audit / monitor · unconfirmed
  4. 10 months agomonth window
  5. this window includes todaymonth windowupdate release · Patch Tuesday 13 Oct 2026Enforced by default · unconfirmed
  6. 8 days agoafterEnforced by default · unconfirmed
  7. 7 days agoEnforced
  8. 2 days ago

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

Requirements, exceptions and scope

  • IntroductionScope1 passage
    BlockNtlmv1SSO
    This article details changes related to auditing and enforcement of blocking NTLMv1-derived cryptography in Windows. The changes apply to the Windows versions listed in Applies…
  • BackgroundExceptionScope4 conditions2 passages
    MS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential Guard
  • New registry keyRequirement1 passage
    BlockNtlmv1SSO
  • Rollout of changesExceptionScope1 condition2 passages
    Sign-OnWi-FiMS-CHAPv2
  • Preparing for Enforce modeRecommendation1 passage
    MS-CHAPv2Sign-OnWi-Fi
  • Temporary security exceptionRequirementExceptionRecommendation2 conditions2 passages
    Sign-On
  • Frequently asked questions (FAQ)ExceptionScope2 conditions2 passages
    Sign-OnWi-FiMS-CHAPv2PEAP-MSCHAPv2EAP-MSCHAPv2Credential Guard

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. New dated step Introductionseen by ChangeIntel
    after October 13, 2026
  2. No longer on the page Introductionseen by ChangeIntel
    October 2026
  3. Scope added Introductionseen by ChangeIntel
  4. Scope added Referencesseen by ChangeIntel
    October 19, 2026
  5. Exception added Backgroundseen by ChangeIntel
  6. No longer on the page Backgroundseen by ChangeIntel
  7. New dated step Introductionseen by ChangeIntel
    October 2026
  8. Exception added Rollout of changesseen by ChangeIntel
  9. Exception added Temporary security exceptionseen by ChangeIntel
  10. No longer on the page Timelineseen by ChangeIntel
    October 2026
  11. New dated step Backgroundseen by ChangeIntel
    August 2025
  12. New dated step Changesseen by ChangeIntel
    October 2026, October 13, 2026
14 earlier changes
  1. New dated step New registry keyseen by ChangeIntel
    August 2025
  2. New dated step New registry keyseen by ChangeIntel
    October 2026, October 13, 2026
  3. New dated step Referencesseen by ChangeIntel
    October 14, 2026, October 2026
  4. New dated step Rollout of changesseen by ChangeIntel
    October 2026, October 13, 2026
  5. No longer on the page Rollout of changesseen by ChangeIntel
    September 2025 and later
  6. No longer on the page Rollout of changesseen by ChangeIntel
    October 2026
  7. New dated step Rollout of changesseen by ChangeIntel
    later in 2025, September 2025 and later
  8. New dated step Timelineseen by ChangeIntel
    October 2026, October 2026
  9. Recommendation added Preparing for Enforce modeseen by ChangeIntel
  10. Requirement added Restartin New registry keyseen by ChangeIntel
  11. Requirement added Temporary security exceptionseen by ChangeIntel
  12. Scope added Backgroundseen by ChangeIntel
  13. Scope added Frequently asked questions (FAQ)seen by ChangeIntel
  14. Scope added Rollout of changesseen by ChangeIntel
Observed history and review priority

Captured 20 Oct 07:19 UTC; extracted 20 Oct 07:19 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.

Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Applicability or exceptions require review · A published date window is near

0 date changes and 0 condition changes across 2 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 3

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 23:56 UTC · 258 of 260 readable · 256 fully read · documentation 415/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.