Howdy everyone! The cat is out of the bag when it comes to Microsoft’s forward outlook on RC4 usage in Kerberos. In the past few months, we have published the following.  Beyond RC4 for Windo...

Have you ever seen a user suddenly lose access to a resource, only to discover they were removed from a group—but with no record of when or how it happened? Tracking deleted group memberships in Acti...

Welcome to part one of my blog series on Cross Forest Certificate Enrollment. Nowadays, businesses often run across multiple Forests for distinct reasons. You would like to ensure secure authenticati...

Hello team, Manuel here. In recent years, Microsoft has introduced Strong Certificate Name Mapping (Strong Mapping) as a requirement for certificate-based authentication in Active Directory environme...

Howdy, everyone! I wanted to write this blog post to discuss the new Kerb3961 library introduced in Windows Server 2025 / Windows 11 24H2. It is (hopefully) making encryption type (etype) usage withi...

In our tech-savvy age, networks are all the rage 🌐;  Joining a domain, though, can sometimes feel like a cage 🖥️.   It makes managing PCs a breeze, with security and ease 🔒,  But troubleshoo...

Note: We apologize for the current viewing experience of these blogs on non-mobile devices.  We are working to resolve this issue as soon as possible.  This is the fourth article in a series: Stop...

Hello, this is Byron from the Microsoft Directory Services Support team. Today, I’d like to share information about an alternative recovery approach for Public Key Infrastructure (PKI) environments. ...

Hello everyone, this is Tagore Nadh, a Sr. Technical Advisor on the Directory Services support team in Microsoft.   In this article, I will explain why scoping is important with a couple of good exam...