Kerberos is used by default for W2K/XP Pro/W2003 domain computers. You don't
need a deep knowledge of it for it to work correctly. The domain controller
are also the kerberos distribution centers and the default security policy
for kerberos is fine. The main thing to know is that proper dns
configuration for an Active Directory domain is CRITICAL for things to work
right including kerberos. All computers can still fall back to
lm/ntlm/ntlmv2 authentication if Kerberos fails. If your network does not
include downlevel computers you want to configure your Domain Security
Policy to not allow lm authentication or storage of lm password hashes. The
links below on dns and kerberos may be helpful. --- Steve
http://support.microsoft.com/default...en-us%3B291382
http://support.microsoft.com/default...b;en-us;825036
http://www.windowsitlibrary.com/Content/617/06/toc.html -- much more than
you really need to know but a good article.
"Bonato Pierantonio" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi all,
> I need to install a new network with Windows 2003 Domain and
> authentication with Kerberos.
> Some one can give me some details where I can find information regarding
> the Kerberos under Windows 2003 or can give me some useful tips?
>
> Thanks
>
>
Similar Threads
Linear Mode
