Microsoft’s recent support guidance pulls two threads of its long-running authentication hardening effort into sharp relief: just-in-time administrator elevation on endpoints and aggressive Kerberos protocol tightening across Active Directory estates. Both moves are targeted at the same root...