Administration

Attributes Tab (Principal Information window)

change password service. If this attribute is not set, then the server issues a server ticket based on the TGT they already posses.

The Require Initial Authentication attribute only applies to service principals. If this attribute is selected for a principal being edited or created, the Allow as Service attribute is automatically selected.

Set As Password Change Service Attribute The Set As Password Change Service attribute specifies whether the server is allowed to issue initial tickets to this service principal for user principals whoose passwords have expired.

Chapter 6

149