humbletech99 Posted December 12, 2006 Report Share Posted December 12, 2006 I've got a fairly new 2003 Active Directory and recently I have had two independent reports of users not being able to get into a file server that they were able to one week before. After a log off and log on they have been ok.I believe this is due to the fact the users haven't logged off in a week and their Kerberos credentials expired. So I've checked domain policy and it seems that the policies are as follows:Maximum lifetime for service ticket 600 minutesMaximum lifetime for user ticket 10 hoursMaximum lifetime for user ticket renewal 7 daysThe last one was of interest here so I just changed it to 60 days.Maximum lifetime for user ticket renewal 60 daysI would like to ask what people's opinion's are on this, especially if there are any other veteran mcses out there, regarding the security implications of this change. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.