Service Advisory - Microsoft Patch Tuesday - October 2026 (KB5127648)
Posted on
October 16, 2026
|
|
|
|
|
Service Advisory
Please share the following with your technical teams.
The October 2026 monthly security update from Microsoft, released on Tuesday October 13, 2026 - KB5127648 strengthens NTLMv1 security by changing the internal default behavior when the BlockNtlmv1SSO registry value is not set. Windows now uses Enforce mode (1) instead of Audit mode (0), blocking the generation of NTLMv1-derived credentials for Single Sign-On (SSO). This change applies only to devices where Credential Guard is disabled and the BlockNtlmv1SSO registry value is not set, and might affect Wi-Fi, Ethernet, and VPN connections that use MS-CHAPv2-based authentication.
Impact/Details:
- UIT teams confirm this security update will break wireless connections that use MS-CHAPv2-based authentication. Computers running Windows will not be able to connect to Air91亚色PLUS.
- UIT teams have updated the central Active Directory GPO 'UIT-Air91亚色Plus V2' to change the behavior back to Audit mode (0).
- Computers running Windows and enrolled in Intune are not impacted, they use the modern certificate-based authentication.
- For more information, please refer to
We thank you for your time and continued understanding.
Contact
IT Client Services at askIT@yorku.ca or 416 736 5800
|
|
|
|
|
|
|
|
|
|
|
|
|
| VISIT WWW.YORKU.CA
This email was sent by: 91亚色, 4700 Keele Street, Toronto, Ontario M3J 1P3
This email is viewed best in Microsoft Outlook for web
|
|
|
|
|
|
|
|
