Enabling Kerberos with a Windows Server 2003 Active Directory Server

QNTC, SBMNWSCMD, and File Level Backup can use Kerberos to authenticate to Windows Active Domain member servers. You may need to install an update Windows Server 2003 on your Microsoft® Active Directory controller servers in order to use Kerberos. This update is available in Service Pack 1 or Microsoft hot fix KB833708. Additional information, including information about installing the service pack or the hot fix, is available on the Microsoft Web site

After you install the hot fix or service pack 1, you must also update the Windows Server 2003 registry. Do the following steps:

1. Click Start>Run
2. Type regedit in the Open box.
3. Click OK.
4. Select the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Kdc registry subkey.
5. Right-click Kdc.
6. Select New .
7. Click DWORD Value.
8. Enter KdcUseRequestedEtypesForTickets as the New Value.
9. Right-click KdcUseRequestedEtypesForTickets.
10. Select Modify.
11. Set the KdcUseRequestedEtypesForTickets registry value to 1.
12. Click OK.
13. Quit Registry Editor.
14. To activate the change, restart the Key Distribution Center service or reboot the server.