ADMX Viewer
Microsoft.Policies.Kerberos• Machine

Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon

This policy setting allows retrieving the Azure AD Kerberos Ticket Granting Ticket during logon. If you disable or do not configure this policy setting, the Azure AD Kerberos Ticket Granting Ticket is not retrieved during logon. If you enable this policy setting, the Azure AD Kerberos Ticket Granting Ticket is retrieved during logon.

Policy Details

Policy Name
CloudKerberosTicketRetrievalEnabled
Registry Key
Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters
Value Name
CloudKerberosTicketRetrievalEnabled
Supported On
At least Windows Server 2019, Windows 10 Version 2004
OMA-URI (CSP)
Kerberos/CloudKerberosTicketRetrievalEnabled
OS Build Version:10.0.22000
CSP Version:11.0
Conflict Resolution:LowestValueMostSecure
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us