Active Directory Administration Cookbook

Enable compound claims on devices in scope for an authentication policy

Follow these steps to enable compound claims on devices in scope for an authentication policy:

1. Create another Group Policy by repeating previous steps 5-7, and start editing it by repeating steps 8-11 from the previous list of steps.
2. In the Group Policy Management Editor window, expand Computer Configuration, then Policies, Windows Administrative Settings, and System.
3. Select Kerberos.
4. In the main pane, right-click the Kerberos client support for claims, compound authentication, and Kerberos armoring setting and select Properties from the menu.
5. Click Enabled:

6. Click ...