blogging about…… Microsoft, Cloud Computing and all other things I find interesting
In: Security
1 Apr 2009To enable event logging of Kerberos: start registry editor navigate to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters If the parameter key does not exist, create it Create a new REG_DWORD Value named LogLevel and give it a value of 1
To see all the service principal names registered in your domain, execute the following command: ldifde -f <FileName> -s <DomainController> -t 3268 -d dc=forest,dc=root -r "(objectclass=computer)" -l servicePrincipalname this will return all computerobjects with an SPN and place it in the file <filename>. For all users execute the following: ldifde -f <FileName> -s <DomainController> -t [...]