ntauth

Microsoft’s recent support guidance pulls two threads of its long-running authentication hardening effort into sharp relief: just-in-time administrator elevation on endpoints and aggressive Kerberos protocol tightening across Active Directory estates. Both moves are targeted at the same root...

Microsoft’s April 2025 Kerberos protections — delivered to close CVE‑2025‑26647 — introduced a new operational knob, AllowNtAuthPolicyBypass, that was intended to let administrators audit then enforce stricter certificate-based authentication behavior on domain controllers; the rollout fixed a...