That was one of my sanity-checks, logging into each DC and using secpol.msc to make sure group policy was applied (and making changes if it hadn't)
Edit: would I need to regenerate the keytab if I un-set that DES option?
That was one of my sanity-checks, logging into each DC and using secpol.msc to make sure group policy was applied (and making changes if it hadn't)
Edit: would I need to regenerate the keytab if I un-set that DES option?