Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 271/271 feeds/APIs · 464/464 docs · checked 09:33 UTC Customize Public modeDiscuss ChangeIntel on Discord

Overview of NTLM auditing enhancements in Windows 11, version 24H2, Windows Server 2019, and later versions

Timelines and exceptions · All guidance changes

Windows · Official Microsoft guidance

No content change seen yet. Watched since 12 Oct 19:19 UTC, last read today 08:48 UTC, next check 24 Oct 08:48 UTC.

Timeline

From the capture of today 08:48 UTC
  1. Audit / monitor11 Jul 2025 Now: Events or warnings only; nothing is blocked
  2. Audit / monitorafter 13 Oct 2026 Published timing is qualified; effectiveness is not confirmed.
  1. 15 months agoAudit / monitor
  2. 10 days agoafterstartingon or afterAudit / monitor · unconfirmed

Requirements, exceptions and scope

Microsoft's revision log on this page · 1 entry

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

  • October 13, 2026 · after October 13, 2026Change logMilestone

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. Microsoft logged an addition Change logMicrosoft's change log
Observed history and review priority

Captured today 08:48 UTC; extracted today 08:48 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Extracted assertions require review · Applicability or exceptions require review

0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

What changed

First observed 23 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 23 Oct 09:33 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current