MicrosoftMicrosoftDoes anyone know whether this key needs to be created or not?
DefaultDomainSupportedEncTypes
I don’t understand this key
RC4DefaultDisablementPhase
Mainly to ensure that legacy operating systems continue to function after July.
It’s unclear, I repeat, particularly when an account needs to be able to log in to, for example, a Windows Server 2003
DefaultDomainSupportedEncTypes is the default encryption types a domain controller will set on an account, if the account has no explicit configuration for
msDS-SupportedEncryptionTypes. By default DefaultDomainSupportedEncTypes will not be configured on domain controllers, which means the current Microsoft default (described by this post/update) will be in use. You can set the DefaultDomainSupportedEncTypes registry key manually on domain controllers to enforce a different behavior, but if you do this I would ensure it is the same on all domain controllers. But I would no recommend changing it.
The RC4DefaultDisablementPhase is another registry key that you can define on each domain controller. This second key would allow you to temporarily rollback all changes that were done by the April patch.
If you did not perform any actions so far, and your domain controllers are all up to date, this means the enforcement is already active for you. If you do not experience any problems, just leave everything as is.
