active directory – KorkscrewGaming

Roll over Kerberos decryption key for Seamless SSO computer account

February 21, 2022 by tylerm

The Kerberos decryption key for the computer account is securely shared with Azure AD and should also be treated as sensitive. We highly recommend a roll over of the Kerberos decryption key for this computer account, at least every 30 days. You will also notice a warning in Azure AD when the Kerberos decryption key … Read more

Set user with blank password

March 30, 2019February 27, 2017 by tylerm

First, 544 is not the only value that means the user is not required to have a password. The userAccountControl attribute is an integer where each bit corresponds to a different setting. For example, 546 means the user does not need a password and the account is disabled. 66080 means the user has “Password does not … Read more