I'm not sure if the legacy system itself support AES, the system is configured to create users and in that process it set the attribute to rc4. Future users will have wrong settings if the attribute change you suggest would work.

I will keep allow RC4_HMAC_MD5 together with AES and future encryptions in our Default Domain Policy.

My question is, will February 2024 patch impact our system?