Enforce kerberos configuration in external AD mode