cross-realm with windows 2k3 ad

[Mark Davies]

On Saturday 18 June 2011 06:08:33 Douglas E. Engert wrote:
> > surely the rc4-hmac type should be supported?
> 
> Yes it should be. But when you setup the cross realm trust,
> did W2K3 assume the MIT realm could only do DES?
> Id the des-only bit on in the TGT account in AD?

How does one check in AD? and change it if it is?

> DES is off by default in most Kerberos and W2008.

That I knew, but don't know anything about the "des-only bit".

cheers
mark