Win 2008R2 DES eanble?

[Wilper, Ross A]

There is a Group Policy option in the security options that sets the Allowed encryption types.

>From a Windows 7 or Windows Server 2008 R2 machine:
Create a group policy object on OU=Domain Controllers or use an existing policy
Set the policy option "Network security: Configure encryption types allowed for Kerberos"
Select which enctypes to allow

-Ross

-----Original Message-----
From: kerberos-bounces at MIT.EDU [mailto:kerberos-bounces at MIT.EDU] On Behalf Of Lars Schimmer
Sent: Thursday, March 04, 2010 7:39 AM
To: openafs-info at openafs.org; kerberos at mit.edu >> kerberos
Subject: Win 2008R2 DES eanble?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi!

Sorry for a bit OT question:
I want to extend our AD with a Windows 2008R2 server with KDC enabled.
Now I know I need to enable DES enctype again to be able to use OpenAFS
with such a KDC, but I am a bit lost where to enable this.
Found a few point on google so far:
- -administrative tools for server
- -for each client seperate of the AD

But what is the real solution?

MfG,
Lars Schimmer
- --
- -------------------------------------------------------------
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: l.schimmer at cgv.tugraz.at
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkuP1A0ACgkQmWhuE0qbFyNjAQCgi473Qem43r/cOepipBI0MNvR
DDEAn0Y8YmWl0UnGMQfFrwxoQTPNmY+W
=j10e
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos