WinSecWiki > Security Settings > Account Policies > Kerberos Policy

Windows Kerberos Policy

Kerberos is the default authentication policy used by Windows to authenticate computers and users on a Windows network. This section of account policies give you access to the customizable settings of Kerberos. In most cases you'll want to stick with the defaults.

Child articles:

  • Enforce User Logon Restrictions
  • Maximum Lifetime For Service Ticket
  • Maximum Lifetime For User Ticket
  • Maximum Lifetime For User Ticket Renewal
  • Maximum Tolerance For Computer Clock Synchronization

Back to top

 

Upcoming Webinars
  • Rethinking Privileged Access for the Age of AI-Powered Attacks
  • Inside Entra ID Authentication: How Tokens, MFA, and Conditional Access Work and Where Attackers Break the Chain
  • Understanding Entra Privileged Identity Management, What PIM Covers and Where It Stops
Additional Resources
    Kerberos Policy
    •Logon Restrictions
    •Service Ticket
    •User Ticket
    •Ticket Renewal
    •Clock Sync

     
     
    User name:
    Password:
      / Forgot?
      Register
    September 2026
    Patch Tuesday
    "Patch Tuesday - 3 Zero Days and 1,000+ Updates! " - sponsored by Supercharger
    .
    Tweet
    Follow @randyfsmith
    About | Newsletter | Contact Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2026 Monterey Technology Group, Inc. All rights reserved.
    Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.
    Terms of Use | Privacy |
    Cookies help us deliver the best experience on our website. By using our website, you agree to the use of cookies.