cross-realm with windows 2k3 ad

Mark Davies mark at ecs.vuw.ac.nz
Sun Jun 19 21:55:42 EDT 2011


On Mon, 20 Jun 2011, Douglas E. Engert wrote:
> > How does one check in AD? and change it if it is?
> 
> Check the userAccountControl attribute of the cross realm TGT
> look for USE_DES_KEY_ONLY  = 2097152,  i.e. 0x200000
> http://support.microsoft.com/kb/305144

But how do you find the cross realm TGT object in something that will 
let you look at userAccountControl?   I don't have direct access to 
the AD so need to tell the admins there where to go and what to 
change.


cheers
mark



More information about the Kerberos mailing list