Decrypting the Selection of Supported Kerberos Encryption Types

Thanks Jerry, i am still watching this topic and the conversation. Its interesting observation from @robertro-sit . In summary, to identify the legacy RC4 traffic we leverage the Audit logs and once its clean the settings can be applied https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj852180(v=ws.11)#:~:text=Reference%20%20%20%20Encryption%20type%20%20,additional%20enc%20...%20%202%20more%20rows%20

Open question:

1. Should this settings be applied on DCs only or other computer objects as well (Servers & Computers)

2. Does a keytab file leveraging RC4 is identified or captured in the Auditlog 4768, 4769 some way?

Thanks

shajeer