ADMX Viewer
Microsoft.Policies.Kerberos• Machine

Define interoperable Kerberos V5 realm settings

This policy setting configures the Kerberos client so that it can authenticate with interoperable Kerberos V5 realms, as defined by this policy setting. If you enable this policy setting, you can view and change the list of interoperable Kerberos V5 realms and their settings. To view the list of interoperable Kerberos V5 realms, enable the policy setting and then click the Show button. To add an interoperable Kerberos V5 realm, enable the policy setting, note the syntax, and then click Show. In the Show Contents dialog box in the Value Name column, type the interoperable Kerberos V5 realm name. In the Value column, type the realm flags and host names of the host KDCs using the appropriate syntax format. To remove an interoperable Kerberos V5 realm Value Name or Value entry from the list, click the entry, and then press the DELETE key. To edit a mapping, remove the current entry from the list and add a new one with different parameters. If you disable this policy setting, the interoperable Kerberos V5 realm settings defined by Group Policy are deleted. If you do not configure this policy setting, the system uses the interoperable Kerberos V5 realm settings that are defined in the local registry, if they exist.

Policy Details

Policy Name
MitRealms
Registry Key
Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos
Value Name
MitRealms_Enabled
Supported On
At least Windows Vista
OMA-URI (CSP)
ADMX_Kerberos/MitRealms
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Syntax:

Enter the interoperable Kerberos V5 realm name as the Value Name.

Enter the realm flags and the host names of the KDCs as

the Value. Enclose the realm flags with the following

tags <f> </f>. Enclose the list of KDCs with the tags <k> </k>

To add multiple KDC names, separate entries with

a semi-colon ";".

Example:

Value Name: TEST.COM

Value: <f>0x00000004</f><k>kdc1.test.com; kdc2.test.com</k>

Another Example:

Value Name: REALM.FABRIKAM.COM

Value: <f>0x0000000E</f>

Define interoperable Kerberos V5 realm settings:

Type: list

Explicit values: true
Additive: true