Tuesday, April 26, 2016

Switch Authentication from NTLM to kerberos

         Switch Authentication from NTLM to Kerberos



Plan details for switching authentication from NTLM to Kerberos on Saturday 23rd 2016

Step1: Make sure AD team has applied the required settings to Use Kerberos .

Execute the following command on the WFE to see all our web applications details by Verifying Service Principal Names (SPNs) using SETSPN command line Prompt:
setspn –L spapp10

Step2:  Change the authentication in CA for each web app
Chose the Negotiate (Kerberos) option and Save

Step3: Change authentication details in IIS to each web app:








Step4: Testing :