My new favorite setting in getting rid of RC4 is this by default disabled checkbox in the trust properties...
#RC4mustDie

https://techcommunity.microsoft.com/t5/itops-talk-blog/tough-questions-answered-can-i-disable-rc4-etype-for-kerberos-on/ba-p/382718

Tough Questions Answered: Can I disable RC4 Etype for Kerberos on Windows 10?

Today I want to share with you a direct experience from the field.    One customer received a request from their security team to disable the RC4 ETYPE (Encryption Type) for Kerberos for their Windows 10 Clients. The support team created a GPO to disable this Etype without thinking too much about th...

TECHCOMMUNITY.MICROSOFT.COM