Full disclosure, this is our blog (Insight Recon).

Saw a bunch of threads this week about Wi-Fi and VPN breaking after the October update, so I wrote down what we found. If you’ve got PEAP-MSCHAPv2 set to use the user’s Windows login automatically, it’s getting blocked now on Win 11 24H2+ and Server 2025 unless Credential Guard is on. Typed creds still work. Look for 4025 in the NTLM operational log.

There’s also a script in there that pulls your wireless/wired GPOs out of AD and lists which profiles are still PEAP-MSCHAPv2 with Windows creds, so you can see what’s going to break before users start calling.

https://insightrecon.com/ntlmv1-sso-blocked/

If Active Directory, Entra ID, or identity security is part of your day job, the r/ActiveDirectory community is running two free events over the next few weeks. Nothing sold, nothing pitched, just identity engineers and sysadmins sharing and talking.

Tomorrow: Community Q&A

Drop into the Discord, ask whatever's on your mind, or just lurk. No registration needed.

When: October 16, 2026 @ 10:00 CT (UTC-5) / 15:00 UTC - 60 minutes

Where: Horizon Secured Discord - https://discord.gg/mVFquFqpsW

November Active Directory Community Virtual Meetup - November 3rd

The more structured one. Panelists lead a discussion on a few prepared topics, then it opens up for questions.

When: Tuesday, November 3, 2026 @ 10:00 CT (UTC-6) / 16:00 UTC - 90 minutes

Register (free): https://events.humanitix.com/active-directory-community-virtual-meetup-4-november-2026

Missed it? Recordings go up on YouTube: https://youtube.com/@ActiveDirectoryCommunity

Some fellow IT people were struggling with forcing systemd into Docker and to use Incus, so I showed them nspawn. For a small environment (5-10 containters) it's sufficient and easy to automate. Here is a short wrap-up post about the technology.