On Mon, 20 Jun 2011, Douglas E. Engert wrote: > > How does one check in AD? and change it if it is? > > Check the userAccountControl attribute of the cross realm TGT > look for USE_DES_KEY_ONLY = 2097152, i.e. 0x200000 > http://support.microsoft.com/kb/305144
But how do you find the cross realm TGT object in something that will let you look at userAccountControl? I don't have direct access to the AD so need to tell the admins there where to go and what to change. cheers mark ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
