> Ugh. Any do's and dont's? How do you harden the KDC (not the host but > the kerberos side)? > > It will solve some of our problems as well but it was deemed too risky. +1 :) -JP