Kerberos authentication ticket request (4768)... Expand / Collapse
Author
Message
Posted 2/15/2018 7:44:43 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 1/15/2018 5:35:34 AM
Posts: 1, Visits: 0
Hi UltimateWinSec team!
Can you please clarify if it is possible that a kerberos authentication ticket request be performed by a service, program or a job running on computer?
Or is it only possible that a user actually logging in interactive mode generates a kerberos request ticket?
Post #7455
Posted 3/3/2018 11:00:36 AM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 215, Visits: 0
Kerberos tickets are not only generated when a user logs in interactively. Computer accounts will authenticate to the domain as well which will be identifiable by typical computer account names that end in "$".

Kerberos authentication can also be used for service accounts. Here is an example: https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/register-a-service-principal-name-for-kerberos-connections.
Post #7457
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 6:23pm