Can't Get Kerberos Token with DES Enabled in AD?

Using a .Net client and WSE 2.0, if I create a new Kerberos token for a User Account in Active Directory, it works as long as the "Use DES type encryption for this account" option is off in user's options in Active Directory.

But if you execute the keytab command to export the keytab from Active Directory, the DES option is enabled for that user account that you exported.

I am using the a call that looks something like this to create a new Kereberos token:

   KerberosToken kerbToken = new KerberosToken(targetPrincipalName);

 Is there a way to tell the WSE API to use DES?

-jjct
.

Relevant Pages

  • Re: Cant Get Kerberos Token with DES Enabled in AD?
    ... User Account in Active Directory, it works as long as the "Use DES type encryption for this account" option is off in user's options in Active Directory. ... But if you execute the keytab command to export the keytab from Active Directory, the DES option is enabled for that user account that you exported. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Configuring Active Directory to Run as a Domain User Account
    ... I need to do this so that Active Directory can do DNS ... > queries upstream to a DNS server that is on the other side of a proxy ... Proxy Server is configured to only let queries go out of our ...
    (microsoft.public.windows.server.active_directory)
  • Re: Add workstatiosn to the domain is OK, but...
    ... I'm trying to do the same thing: Create a user account which ONLY can Add / ... Re-add machines to the Active Directory. ... The original poster mentioned he " gave 'add workstations to the domain' ... Re-Add machine accounts into the Active directory? ...
    (microsoft.public.windows.server.active_directory)
  • Configuring Active Directory to Run as a Domain User Account
    ... I need to do this so that Active Directory can do DNS ... queries upstream to a DNS server that is on the other side of a proxy ... Proxy Server is configured to only let queries go out of our ...
    (microsoft.public.windows.server.active_directory)
  • Single user issue; best troubleshooting
    ... single user account repeatedly prompts for authentication? ... I have devoted considerable time and effort to isolating the cause of a ... but have not YET removed the user from Active Directory ... Kerberos/NTLM authentication seemed to be failing 50% of the time on ...
    (microsoft.public.windows.server.active_directory)