Re: Kerberos User Ticket Lifetime

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 07/30/05

  • Next message: Joe Richards [MVP]: "Re: Patching Alpha NT Server Systems" 
    Date: Fri, 29 Jul 2005 19:02:01 -0400

    This policy can only be set at the domain level. 

    --
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Kit wrote:
> Hi,
> In Windows 2000 Server and Windows Server 2003, is it possible to set 
> Maximum User Ticket Lifetime at a userid level, or only at the domain level 
> with the Maximum User Ticket Lifetime parm?  I would like to have a domain 
> setting that would cover most of the users, and set a shorter ticket lifetime 
> on the users who are in the Administrators groups, but didn't see a way that 
> a shorter lifetime could be set on those individual userids to achieve that.  
> Anyone know if that's possible, and if so, how you'd do that?
> 
> Thanks in advance!
> - Kit
  • Next message: Joe Richards [MVP]: "Re: Patching Alpha NT Server Systems"

    Relevant Pages

    • Kerberos User Ticket Lifetime
      ... Maximum User Ticket Lifetime at a userid level, or only at the domain level ...
      (microsoft.public.security)
    • Re: User name auto filled
      ... Sounds like this policy is not configured at domain level, ... Prevent the Last Logged-On User Name from Being Displayed in ... www.ilopia.com - FAQ and Tutorials for Windows Server 2003 "Kathy" wrote in message ...
      (microsoft.public.windows.server.general)
    • Re: Strong Password setting using GPO
      ... Is it possible to just apply Strong Password settings GPO to individual containers or does it have to be done at the domain level? ... Everything I see in documentation references making a copy of the default domain policy. ... Multiple Password Policies is not supported in Windows Server 2003 - but there's a bunch of third party software out there than can take care of it. ...
      (microsoft.public.security)
    • Re: Cant get change to apply?
      ... controllers OU. ... You can make it at the domain level, ... Microsoft MVP - Windows Server - Directory Services ...
      (microsoft.public.windows.server.active_directory)