Latest / The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations
Windows 11 Quietly Mandates Enterprise Certificate-Based Authentication
In this episode of The Windows Podcast, Lucas and Luna dive into Microsoft's quiet mandate for certificate-based authentication in Windows 11 Enterprise. Starting with Windows 11 24H2, the default authentication policy shifts from password-based to certificate-based for domain-joined devices, leveraging the built-in Certificate Autoenrollment feature. The hosts explore how this eliminates password spraying and pass-the-hash attacks, the rollout timeline through Group Policy and Intune, and the hidden infrastructure requirements—including Active Directory Certificate Services and proper PKI…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.