changing long term keys for services on windows

[Nikhil Mishra]

Hi All ,

Can a windows service long term key be changed on the fly? 


What I mean is when the machine hosting service joins the domain
long term keys are exchanged between service and KDC ( This is what
I understand . Please correct me If I am not ).

If as a KDC admin I would like to change the key being used for
encrypting service tickets for the service , Is there a way to do it ?

If I somehow change the key for given SPN ( using ktpass ) on KDC
is it possible to communicate this back to service ?Does KDC do it
automatically ?Is there some event it waits for before syncing keys with
service ?


Thanks

Nikhil