kerberos auditing

If Microsoft Entra Domain Services authentication fails where RC4 is no longer available, treat the failure as a dependency-identification incident—not as a reason to broadly restore legacy encryption. The practical goal is to identify the client or workload, service principal, account, keytab...

Microsoft is moving Windows authentication firmly away from the legacy RC4 cipher and adding concrete detection and remediation tooling so administrators can identify, isolate, and remediate RC4-dependent accounts and devices before the change becomes the default behavior in domain environments...