Based on the following Notification from Microsoft:
Warning
Windows updates for CVE-2026-20833 enforce RC4 hardening in phases. Plan and complete remediation before full enforcement:
we disabled the Kerberos RC4 encryption on the EntraID Domain Services.
The configuration was leading to the mentioned incident.
As this will be anyhow eminent to happen ( enforcement of Kerberos to AES ) we will continue internal investigation with Microsoft Support to identify root cause of the action applied today.
Until further notice the Kerberos RC4 encryption will remain enabled.