Windows Kerberos Enforcement April 2026: AES-SHA1 Only, FSLogix SMB Risk, and Migration Guide
Microsoft will enforce AES-SHA1 as the only supported Kerberos encryption type starting April 2026, eliminating RC4-HMAC and DES-CBC-CRC entirely from Windows authentication. This security hardening...