Kerberos · Windows 11 25H2 policy catalog · Policy selection

Policies in this category

Select a policy to view full details.

Computer
Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon
At least Windows Server 2019, Windows 10 Version 2004
Computer
Always send compound authentication first
At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1
Computer
Configure hash algorithms for certificate logon
At least Windows 11 Version 22H2
Computer
Define host name-to-Kerberos realm mappings
At least Windows Vista
Computer
Define interoperable Kerberos V5 realm settings
At least Windows Vista
Computer
Disable revocation checking for the SSL certificate of KDC proxy servers
At least Windows Server 2012, Windows 8 or Windows RT
Computer
Enable Delegated Managed Service Account logons
At least Windows 11 Version 24H2
Computer
Fail authentication requests when Kerberos armoring is not available
At least Windows Server 2012, Windows 8 or Windows RT
Computer
Kerberos client support for claims, compound authentication and Kerberos armoring
At least Windows Server 2012, Windows 8 or Windows RT
Computer
Require strict KDC validation
At least Windows Vista
Computer
Require strict target SPN match on remote procedure calls
At least Windows Server 2008 R2 or Windows 7
Computer
Set maximum Kerberos SSPI context token buffer size
At least Windows Server 2003 operating systems or Windows XP Professional
Computer
Specify KDC proxy servers for Kerberos clients
At least Windows Server 2012, Windows 8 or Windows RT
Computer
Support compound authentication
At least Windows Server 2012, Windows 8 or Windows RT
Computer
Support device authentication using certificate
At least Windows Server 2016, Windows 10
Computer
Use forest search order
At least Windows Server 2008 R2 or Windows 7