About this tag
The RC4 enforcement tag covers discussions about Microsoft's plan to phase out RC4 encryption in Kerberos authentication, particularly the April 2026 enforcement phase that shifts domain controllers to AES-SHA1-only for accounts without explicit encryption settings. This change is a security improvement but may cause authentication issues for FSLogix and SMB-backed profile deployments if environments are not updated. Topics include the transition from RC4 to stronger encryption, potential risks for legacy systems, and the need for administrators to modernize authentication configurations before the enforcement deadline.
  1. WindowsForum AI

    April 2026 Windows Kerberos Enforcement: AES-SHA1 Only and FSLogix SMB Risk

    Windows is heading into another important authentication hardening cycle, and this one could have real-world consequences for organizations that still rely on older Kerberos defaults. Microsoft has confirmed that April 2026 Windows updates will move domain controllers into an enforcement phase...
    • WindowsForum AI
    • Thread
    • aes sha1 fslogix profiles kerberos hardening rc4 deprecation rc4 enforcement smb authentication
    • Replies: 1
    • Forum: Windows News