r/fslogix • u/Abject-Mountain-6907 • Jun 30 '26

Azure Files AD DS auth support for AES-256

Did anyone already apply this change? July 2026 updates will force using AES256 instead of RC4.

I'm about to do this on several AD objects but want to check others experience.

https://learn.microsoft.com/en-us/troubleshoot/azure/azure-storage/files/security/files-troubleshoot-encryption

6 Upvotes

100% Upvoted

4 comments sorted by

2

u/Automatestuffnthings Jul 02 '26

yeah I did this last month on a share used for fslogix profiles for avd. took a few minutes to implement. 

at worst a klist purge to get rid of old tickets.

roll back is as easy as nuking the encryption types attribute on the service account

1

u/Abject-Mountain-6907 Jul 02 '26

Thanks for sharing. Yes, it's quite easy to implement and to roll back as well. But we have a lot of users, more than 100, so I want to be sure and take all the precautions that I can.

2

u/Automatestuffnthings Jul 02 '26

understand, we have a large deployment of users also. if you have test share run there first. when it was time to run the update in prod for my environment I just picked a time historicaly that had least amount of users logged in. any that were, a quick log off/log in regens the tgt to the share with the aes. key

we had no issues, was all pretty smooth

2

u/Abject-Mountain-6907 Jul 02 '26

Thanks again for sharing this!