ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

NTLMv1 SSO enforcement phases

Timelines and exceptions · All guidance changes

Windows · Official Microsoft guidanceObserved changes retained

Observed content change

26 new passages (about 560 words), 12 edited passages (133 words changed), 3 removed passages (about 70 words). The changed wording mentions dates and deadlines, defaults, prerequisites, mitigations, settings and controls. Review the source to confirm the effect.

May need admin actionCheck whether new requirements apply to your setup; check whether a default changed for your tenant or devices; check the dates against your plans.

Requirement wordingDefault wordingDate or deadline wording
EditedIntroduction
This article details [removed: the recent and upcoming] changes in Windows 11, [removed: version] [added: versions 26H2, 25H2, and] 24H2 and Windows Server 2025, focusing on the auditing and [removed: eventual] enforcement of blocking NTLMv1-derived cryptography. These changes are part of [removed: Microsoft’s] [added: the] broader [added: Microsoft] initiative to phase out NTLM.
NewIntroduction
[added: The October 2026 Windows security update introduces a change that strengthens NTLMv1 security by changing the internal default behavior when the BlockNtlmv1SSO registry value is] …
EditedBackground
… some scenarios, such as when using [removed: MS-CHAPv2] [added: MS-CHAPv2-based connections, including PEAP-MSCHAPv2, and EAP-MSCHAPv2,] in a domain-joined environment.
NewBackground
[added: Beginning with Windows updates released in August 2025, Audit mode was introduced to help administrators identify dependencies on NTLMv1-derived credentials before enforcement.]
EditedBackground
… Credential Guard’s requirements are met. The [removed: upcoming] changes [added: outlined in this article] only affect devices where Credential [removed: g][added: G]uard is disabled; if Windows Credential Guard is enabled on the device, the[added: se] changes [removed: outlined in this article] do not take effect.

Short quotes of Microsoft's changed wording from Microsoft source, © Microsoft Corporation. Read the page for the full text.

Read the current Microsoft source · Link to this observation · Compare any two versions

Sections to inspect

Up to 12 section headings from retained before/after evidence. The current source may have changed again.

Why this was flagged

The changed words, with a few words around them, matched these rule categories: dates and deadlines, defaults, prerequisites, mitigations, settings and controls. These matches identify subjects to assess; they do not establish a policy change or applicability.

Observation details · observed 19 Oct 00:53 UTC
Observed by ChangeIntel
19 Oct 00:53 UTC
Source update metadata
15 Oct 06:40 UTC
Source review date
2025-08-28
First observed on this installation
12 Oct 19:19 UTC
Last successful check
today 19:44 UTC
Next check due
21 Oct 01:44 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

This is an earlier observation; review the latest in My radar.

Timeline

From the capture of 19 Oct 00:53 UTC · an earlier observation
Current window October 2026 this window includes today · Enforced by default
  1. Audit / monitorAugust 2025 Events or warnings only; nothing is blocked
  2. Audit / monitorand later; update release September 2025 Published timing is qualified; effectiveness is not confirmed.
  3. November 2025
  4. Enforced by defaultOctober 2026 Published timing is qualified; effectiveness is not confirmed.
  5. Enforced by default13 Oct 2026 Published timing is qualified; effectiveness is not confirmed.
  6. Enforced14 Oct 2026 Now: Enforced; the override no longer helps
  1. 9 months agoyear windowlater in
  2. 13 months agomonth windowlateAudit / monitor
  3. 12 months agomonth windowupdate release · Patch Tuesday 9 Sep 2025Audit / monitor · unconfirmed
  4. 10 months agomonth window
  5. this window includes todaymonth windowupdate release · Patch Tuesday 13 Oct 2026Enforced by default · unconfirmed
  6. 7 days agoEnforced by default · unconfirmed
  7. 6 days agoEnforced

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. Exception added Backgroundseen by ChangeIntel
  2. No longer on the page Backgroundseen by ChangeIntel
  3. New dated step Introductionseen by ChangeIntel
    October 2026
  4. Exception added Rollout of changesseen by ChangeIntel
  5. Exception added Temporary security exceptionseen by ChangeIntel
  6. No longer on the page Timelineseen by ChangeIntel
    October 2026
  7. New dated step Backgroundseen by ChangeIntel
    August 2025
  8. New dated step Changesseen by ChangeIntel
    October 2026, October 13, 2026
  9. New dated step New registry keyseen by ChangeIntel
    August 2025
  10. New dated step New registry keyseen by ChangeIntel
    October 2026, October 13, 2026
  11. New dated step Referencesseen by ChangeIntel
    October 14, 2026, October 2026
  12. New dated step Rollout of changesseen by ChangeIntel
    October 2026, October 13, 2026
10 earlier changes
  1. No longer on the page Rollout of changesseen by ChangeIntel
    September 2025 and later
  2. No longer on the page Rollout of changesseen by ChangeIntel
    October 2026
  3. New dated step Rollout of changesseen by ChangeIntel
    later in 2025, September 2025 and later
  4. New dated step Timelineseen by ChangeIntel
    October 2026, October 2026
  5. Recommendation added Preparing for Enforce modeseen by ChangeIntel
  6. Requirement added Restartin New registry keyseen by ChangeIntel
  7. Requirement added Temporary security exceptionseen by ChangeIntel
  8. Scope added Backgroundseen by ChangeIntel
  9. Scope added Frequently asked questions (FAQ)seen by ChangeIntel
  10. Scope added Rollout of changesseen by ChangeIntel
Observed history and review priority

Captured 19 Oct 00:53 UTC; extracted 19 Oct 00:54 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 3

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Retained observations

  • today 07:19 UTC

    3 edited passages (89 words changed). The changed wording mentions dates and deadlines, supported platforms, settings and controls. Review the source to confirm the effect.

  • 19 Oct 00:53 UTC · shown above
  • 12 Oct 19:19 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026
  1. 20 Oct 2026 References (2)19 Oct 2026
  2. 20 Oct 2026 IntroductionOctober 2026 · Enforced by default, conditional → 13 Oct 2026 or later · Enforced by default, conditional
  3. 20 Oct 2026 Changes13 Oct 2026 · Enforced by default, conditional → October 2026 · Enforced by default, conditional
  4. 20 Oct 2026 SummaryMicrosoft's guidance publishes 7 dates, from 2025 to 14 Oct 2026 (References). → Microsoft's guidance publishes 8 dates, from 2025 to 19 Oct 2026 (References).
  5. 19 Oct 2026 TimelineAugust 2025 · Audit / monitor, tentative → No longer listed in this observation. Previously: August 2025 · Audit / monitor, tentative
  6. 19 Oct 2026 Settings namedBlockNTLMv1SSO, BlockNtlmv1SSO, Credential Guard → BlockNtlmv1SSO, BlockNTLMv1SSO, Credential Guard, MS-CHAPv2, Sign-On, Wi-Fi, EAP-MSCHAPv2, PEAP-MSCHAPv2
  7. 19 Oct 2026 References14 Oct 2026 · Enforced
  8. 19 Oct 2026 Changes13 Oct 2026 · Enforced by default, conditional
  9. 19 Oct 2026 IntroductionOctober 2026 · Enforced by default, conditional
  10. 19 Oct 2026 Begin rollout of changes to Windows Server 2025November 2025, tentative → November 2025
  11. 19 Oct 2026 Rollout of changes (2)October 2026 · Enforced by default, tentative, conditional → September 2025 or later · Audit / monitor
  12. 19 Oct 2026 BackgroundAugust 2025 · Audit / monitor
Show 2 more recent changes
  1. 19 Oct 2026Rollout of changes September 2025 or later · Audit / monitor → 2025
  2. 19 Oct 2026Summary Microsoft's guidance publishes 4 dates, from August 2025 to October 2026 (Rollout of changes). → Microsoft's guidance publishes 7 dates, from 2025 to 14 Oct 2026 (References).

The most recent 100 field changes are listed. Complete recorded revisions are kept separately.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.