Alistair Mackay wrote: > >>I don't think we plan to implement code to disable the PAC. > > > Shouldn't be necessary as long as all apps take into account that ticket > data may be any size. > I believe if you disable the use of preauthentication for your Win2K user principals, the PAC data is not included in their tickets. -Wyllys