On 11/3/2011 2:58 AM, Stanislaw Kaminski wrote: > Well, I am using KfW, but since I have no domain yet I wasn't able to > test if KfW automagically gets Kerberos tickes while user logs on. I > don't want it to ask for a password second time, after AD logon.
On Vista and later, KFW will not obtain tickets at logon for a realm other than the one that was used for Windows logon. It has no mechanism to pass the acquired tickets into the logon session for use by applications. KFW will make available the Windows logon tickets via the MSLSA credential cache interface. Jeffrey Altman
signature.asc
Description: OpenPGP digital signature
