Administrator Protection—meant to lock down Windows 11 —was hacked in testing and forced Microsoft to rethink the design before it even ships. At the same time, Kerberos is finally saying goodbye to RC4, with enforcement deadlines that could break legacy auth if you don’t prepare. And Microsoft just gave admins a first‑party way to manage configuration drift across Microsoft 365 with new Graph UTCM APIs.