List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: RE: [ActiveDir] Network security: Configure encryption types allowed for Kerberos missing?

Prev Next

You are not authorized to post a reply.

Author

Messages

bradturner32 User is Offline

Posts:2

07/07/2010 11:50 PM
Ahh, my bad, it's a 7/R2 setting only, so 2008 doesn't cut it by itself. I'm considering turning off the AES encryption types and only specifying RC4 on a select few R2 servers since they are throwing tons of pre-auth 675 failures on the 2003 DC's. Ordinarily I'd just ignore it, but it's generating a lot of traffic in the security logs. Brad Turner, Solutions Architect Microsoft MVP - Identity Lifecycle Manager enSYNCH<http://www.ensynch.com/> - Identity and Access Management Practice [cid:image001.jpg@01CB1DEB.FE4D25E0]<http://feeds.feedburner.com/~r/idchaos/~6/2> From: Brad Turner Sent: Wednesday, July 07, 2010 3:37 PM To: 'activedir@mail.activedir.org' Subject: Network security: Configure encryption types allowed for Kerberos missing? The policy mentioned here does not appear to be available when editing the DC policy on a 2008 Server in a 2003 FFL domain: http://support.microsoft.com/kb/977321 Am I missing something? Brad Turner, Solutions Architect Microsoft MVP - Identity Lifecycle Manager enSYNCH<http://www.ensynch.com/> - Identity and Access Management Practice [cid:image001.jpg@01CB1DEB.FE4D25E0]<http://feeds.feedburner.com/~r/idchaos/~6/2>

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > RE: [ActiveDir] Network security: Configure encryption types allowed for Kerberos missing?

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads