July’s record Patch Tuesday also completed the Kerberos RC4 hardening rollout tied to CVE-2026-20833: audit mode and the registry override are gone, and domain controllers no longer fall back to RC4. If any service account still leans on it, authentication starts failing. Here is what breaks and how to find it before the tickets pile up.
