Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon

Supported on: At least Windows Server 2019, Windows 10 Version 2004

Registry

HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters

Value name: CloudKerberosTicketRetrievalEnabled

Enabled: CloudKerberosTicketRetrievalEnabled = 1

Disabled: CloudKerberosTicketRetrievalEnabled = 0

Description

This policy setting allows retrieving the Azure AD Kerberos Ticket Granting Ticket during logon. If you disable or do not configure this policy setting, the Azure AD Kerberos Ticket Granting Ticket is not retrieved during logon. If you enable this policy setting, the Azure AD Kerberos Ticket Granting Ticket is retrieved during logon.