How to configure Kerberos security Microsoft server

Microsoft server

[@MR-vj8dn]

By the sound of your voice, you know this so good that you can talk about it while asleep. 😊

[@ahmederrabbah531]

Maaan, you are sleeping when talking, I am getting sleepy 🤣

[@josh-blockhouseit9184]

What about if you have a remote Master KDC, say as a Red Hat VM elsewhere on your network, and you want to configure your Windows Server Domain Controller as a slave KDC?

[@galaxyspace4077]

Wake up ! you are asleep .

[@gerardoromero3129]

but how do you enable kerberos on your domain controller. trying to join a WS to my Domain via kerberos.

[@saroku]

Modern supported Windows operating systems all enable and support Kerberos by default. Computer objects will automatically get a HOST SPN. If Kerberos fails, it will automatically try NTLM based on the LMCompatibilityLevel setting in the registry (which is on every device).

[@bradsnapp8437]

I don't have the Group Policy Manger option. How do I get that?

[@saroku]

You have to being doing this on a DC or install RSAT on a management workstation.

[@saroku]

Not to be a troll, but this video is worthless. Kerberos is enabled by default on Windows Operating Systems. There's no need to change defaults unless your InfoSec team is paranoid and don't know how AD works. Also, the settings you're showing are not default and are more lax. Yours are not best practice.