RC4 Deprecation in Active Directory: From Audit Phase to Full Enforcement

From January to July 2026, Microsoft completed the removal of RC4-HMAC from the Kerberos protocol in Active Directory. Here is what actually happens in production, how to find accounts still tied to the old algorithm, and how to manage the transition without disrupting operations.