The default is Enabled. No ticket can be renewed after this time. Settings are in minutes. When the KDC clock is this many minutes different from the Kerberos client's clock, tickets are not issued for the client. This is a deterrent in Replay attacks.
Settings are in minutes.
Add the Group Policy snap-in for the default domain policy. Make changes as needed, but proceed with caution. All rights reserved. Terms of Use. No Did not apply Please provide additional comments about this information.