Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Windows Server 2019 Kerberos user ticket lifetime must be limited to 10 hours or less.
Description
Discussion Text
In Kerberos, there are two types of tickets: Ticket Granting Tickets (TGTs) and Service Tickets. Kerberos tickets have a limited lifetime so the time an attacker has to implement an attack is limited. This policy controls how long TGTs can be renewed. With Kerberos, the user's initial authentication to the domain controller results in a TGT, which is then used to request Service Tickets to resources. Upon startup, each computer gets a TGT before requesting a service ticket to the domain controller and any other computers it needs to access. For services that start up under a specified user account, users must always get a TGT first and then get Service Tickets to all computers and services accessed.
Satisfies: SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058
Satisfies: SRG-OS-000112-GPOS-00057, SRG-OS-000113-GPOS-00058
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.