You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
rc4 removal
About this tag
The RC4 removal tag covers Microsoft's ongoing effort to phase out the RC4 cipher in Windows Kerberos authentication. Content focuses on new auditing fields in Event IDs 4768 and 4769, including msds-SupportedEncryptionTypes, Available Keys, and Advertised Etypes, which help administrators detect RC4-dependent accounts and devices. PowerShell scripts and remediation tools are provided to scan event logs and Active Directory for entities lacking AES keys. The tag is relevant for enterprise IT professionals managing domain environments and preparing for the eventual default disabling of RC4 in Windows authentication.
Microsoft is moving Windows authentication firmly away from the legacy RC4 cipher and adding concrete detection and remediation tooling so administrators can identify, isolate, and remediate RC4-dependent accounts and devices before the change becomes the default behavior in domain environments...