AZureADSSOACC and AES

I have been auditing event IDs 4768 and 4769 and noticed a few accounts with 0x17. I believe that to be related to RC4. One of the accounts is an AzureADSSOacc account that was created before the year 2020. Will this account use AES if we upgrade the DC to 2025 or will we have to force it?