kerberos

[ballaniang]

I'm runiing Win 2003 as pptp and domain server.
Do i need kerberos service?
If I disable it what will happen ?
I don't like kerberos port to be open!
thanks

 

[adcfaq]

by default, NTLM and NTLM v2 will kick in down-level client to be authenticated to 2003 domain.
To disable Kerberos, Microsoft provides a registry hack (the hack is available from Windows 2000 Service Pack 2 onward). The hack is called NT4Emulator (REG_DWORD) and should be added to the HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Netlogon/ Parameters registry key of the Windows 2000 SP2 or later DC and set to value 1.

---------------------------------------
Sr. Directory Services/Exchange Consultant

http://adcfaq.8m.com/

 

[ballaniang]

Do you mean that Active directory needs Kerberos for authentification. Or is kerberos used by Echange

 

[adcfaq]

AD can adapt NTLM/NTLM v2.

---------------------------------------
Sr. Directory Services/Exchange Consultant

http://adcfaq.8m.com/