Windows 2000 KDC interoperability

Wyllys Ingersoll wyllys.ingersoll at
Wed Dec 11 08:08:00 EST 2002

Alistair Mackay wrote:

>>I don't think we plan to implement code to disable the PAC.
> Shouldn't be necessary as long as all apps take into account that ticket
> data may be any size.

I believe if you disable the use of preauthentication for your Win2K
user principals, the PAC data is not included in their tickets.


More information about the krbdev mailing list