Most organizations treating RC4 Kerberos hardening as a Microsoft deadline problem are missing the more immediate issue: depending on your compliance framework, active RC4 usage in Active Directory may already be a violation — today, not July 14, 2026.

Microsoft's enforcement timeline is about operational continuity.