Comments on: How I solved a strange Kerberos issue https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/ Intune, Windows, Office 365, Microsoft 365, Azure, Automation Fri, 14 Feb 2025 08:07:35 +0000 hourly 1 By: Jiří https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/#comment-244693 Tue, 17 Dec 2024 09:41:24 +0000 https://inthecloud247.com/?p=12845#comment-244693 Thank you for this blog post – resolved for me with one more thing.
KDC on DCs was hardened in Default GPO to fail on “KDC support for claims, compound authentication and Kerberos armoring” with Value 3.
This needed to be changed at least to Value 2 – Always provide claims

https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.KDC::CbacAndArmor

]]> By: Peter Klapwijk https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/#comment-244418 Fri, 13 Dec 2024 08:02:45 +0000 https://inthecloud247.com/?p=12845#comment-244418 In reply to Anton.

No, I didn’t.

]]> By: Anton https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/#comment-244417 Fri, 13 Dec 2024 07:56:18 +0000 https://inthecloud247.com/?p=12845#comment-244417 In reply to Peter Klapwijk.

Peter, did you tried it with 0?

]]> By: Peter Klapwijk https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/#comment-244416 Fri, 13 Dec 2024 07:41:37 +0000 https://inthecloud247.com/?p=12845#comment-244416 In reply to Anton.

Yes, for our environment that’s correct. It configures the cache time to 1 minute.

]]> By: Anton https://inthecloud247.com/how-i-solved-a-strange-kerberos-issue/#comment-244394 Fri, 13 Dec 2024 04:53:01 +0000 https://inthecloud247.com/?p=12845#comment-244394 The value you set for the registry key is 1 correct?

]]>