Blog Post

ITOps Talk Blog
4 MIN READ

Tough Questions Answered: Can I disable RC4 Etype for Kerberos on Windows 10?

Daniele De Angelis's avatar
Daniele De Angelis
Icon for Microsoft rankMicrosoft
Apr 03, 2019
Today I want to share with you a direct experience from the field.    One customer received a request from their security team to disable the RC4 ETYPE (Encryption Type) for Kerberos for their Wi...
Updated Apr 27, 2021
Version 5.0
windows server
Vinix's avatar
Vinix
Copper Contributor
Feb 20, 2025

I also ran into this issue. The domain environment has windows server 2012 R2 DCs only and no child domain. Unable to change password of user on client PCs(Win10 & 11) if I disabled RC4-HMAC-MD5 via domain group policy. Any solution? Can I set AES to high priority?