Kerberos Policy Settings

[Greg]

I'm trying to figure out why multiple domain policies in
my environment have different Kerberos settings. Several
policies have all the Kerberos policy settings
as 'undefined.' Several others have the same default
values, but there is no record of them being changed.
Any idea why some Kerberos policy settings would be set
with default values while others are left as 'undefined?'

Thanks,
Greg

 

[Sensei]

Are you certain you are looking at the domain policy and not the domain
controller policy?

-ds

 

[Herb Martin]

I'm trying to figure out why multiple domain policies in
my environment have different Kerberos settings. Several
policies have all the Kerberos policy settings
as 'undefined.'

That would make sense as each GPO has the "setting item" but
you would probably find no reason to set this differently on different
GPOs.

Several others have the same default
values, but there is no record of them being changed.

You or another Admin did this -- except for the Default Domain Policy.

Any idea why some Kerberos policy settings would be set
with default values while others are left as 'undefined?'

Because you or another admin set them this way.

 

[Mark Ramey [MSFT]]

By default only the Default Domain policy will have the settings defined.
All other policies that you create will have everything set to not defined.
This is by design.