Forum Discussion
RC4 Deprecating by April
I’m reviewing our Seamless SSO setup and noticed that the AzureADSSOAcc account is still using RC4 (encryption type 0x17) from Kerberos event logs. I have a few questions regarding this: Why ...
I believe this is what Microsoft current arrangement is, which you should rotate the AzureADSSOAcc keys with Update-AzureADSSOForest, which re-provisions the account with AES keys and does not cause downtime for Seamless SSO.
Windows Kerberos RC4 deprecation: what will break in Active Directory and how to fix it – 4sysops
https://windowsforum.com/threads/april-2026-windows-kerberos-enforcement-aes-sha1-only-and-fslogix-smb-risk.408005/