kerberos hardening

  1. April 2026 Windows Security: Kerberos Hardening, LSASS Crashes, and DC Outages

    The April 2026 Windows security cycle is already proving to be one of the most consequential update months in recent memory for enterprise identity teams. Microsoft has confirmed a Kerberos hardening change that begins in April 2026, and that shift is landing at the same time administrators are...
  2. Windows Kerberos NTLM Hardening: Clone/Sysprep Breaks Auth After Updates (Event 6167)

    Windows administrators are entering a sharper, less forgiving era for imaging and authentication workflows. Microsoft’s latest hardening changes for Kerberos, NTLM, and loopback detection are explicitly designed to stop privilege-escalation paths that depended on cloned machines, duplicated...
  3. April 2026 Kerberos RC4 Hardening: AES-SHA1 Default Impacts FSLogix & SMB

    Windows admins should expect another Kerberos hardening wave in April 2026, and this one is likely to be felt most acutely in environments that still depend on legacy encryption assumptions. Microsoft is moving Windows domain controllers away from quietly falling back to RC4 when an Active...
  4. April 2026 Windows Kerberos Enforcement: AES-SHA1 Only and FSLogix SMB Risk

    Windows is heading into another important authentication hardening cycle, and this one could have real-world consequences for organizations that still rely on older Kerberos defaults. Microsoft has confirmed that April 2026 Windows updates will move domain controllers into an enforcement phase...
  5. September 2025 Windows 10 22H2 Patch Tuesday: Backup for Organizations, ESU Block & SMB Hardening

    Microsoft’s September Patch Tuesday lands for Windows 10 with a mix of stability fixes, enterprise controls and a new organizational backup capability — but the rollout is as much about operational discipline as it is about fresh features. The September 2025 cumulative updates bring build bumps...