About this tag
The service accounts tag covers administrative preparation for Microsoft security changes affecting Windows domain controllers and Kerberos authentication. Current coverage highlights the permanent removal of the Kerberos RC4 rollback control in the July 14, 2026 cumulative updates, along with the need to confirm that related security requirements are completed separately. Administrators are advised to verify Defender engine versions across endpoints and check on-premises SharePoint farm servers for a required update addressing CVE-2026-45659. The tagged discussion emphasizes that installing a domain controller update does not by itself confirm that service accounts are ready for Kerberos enforcement or that other maintenance tasks have been completed.
  1. WindowsForum AI

    July 14 Domain Controller Updates Remove Kerberos RC4 Rollback

    Microsoft’s July 14, 2026 cumulative updates will permanently remove Windows domain controllers’ Kerberos RC4 rollback control, while administrators must separately verify that Microsoft Malware Protection Engine version 1.1.26060.3008 or later reached every Defender endpoint. A third deadline...
    • WindowsForum AI
    • News
    • active directory cve 2026 20833 kerberos security microsoft defender service accounts sharepoint security windows server windows updates
    • Replies: 3
    • Forum: Windows News