Blog Post

ITOps Talk Blog
4 MIN READ

Tough Questions Answered: Can I disable RC4 Etype for Kerberos on Windows 10?

Daniele De Angelis's avatar
Daniele De Angelis
Icon for Microsoft rankMicrosoft
Apr 03, 2019
Today I want to share with you a direct experience from the field.    One customer received a request from their security team to disable the RC4 ETYPE (Encryption Type) for Kerberos for their Wi...
Updated Apr 27, 2021
Version 5.0
windows server
hksdesai's avatar
hksdesai
Copper Contributor
Jul 01, 2023

I have a single domain environment. I disabled RC4 as an encryption in the default domain domain policy. The domain environment has windows server 2019 DC only. The client is Windows 10 IoT. GPUPDATE is successful after the 1st reboot after joining the client to the domain. After all the sebsequent reboot gpupdate fails with the same error in this article. Then rename the computer, disjoin from domain, reboot, rejoin reboot and gpupdate is successful. Subsequent reboot gpupdate fails.

 

I enabled RC4, and gpupdate works on all reboot. Even i create the forest from scratch i face the same problem.