How do I create a policy to prevent the use of Kerberos Authentication for Bastion?

Question

How do I create a policy to prevent the use of Kerberos Authentication for Bastion?

Erik Solvin 0

Hi, I want to create a policy in Azure to prevent the use of Kerberos Authentication for Bastion hosts. Looking at the documentation: https://learn.microsoft.com/en-us/azure/templates/microsoft.network/bastionhosts?pivots=deployment-language-bicep, there doesn't seem to exist an alias or property for Kerberos Authentication that I can use to prevent the use of this functionality. Does someone know a way to work around this or do I need to wait for the alias/property to be created by Microsoft?

ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-04-25T02:14:00.9566667+00:00

@Erik Solvin Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-05-02T23:21:29.68+00:00

@Erik Solvin

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-04-25T02:14:00.9566667+00:00

@Erik Solvin Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-05-02T23:21:29.68+00:00

@Erik Solvin

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

@Erik Solvin

Welcome to the Microsoft Q&A forum. As configuring Bastion for Kerberos authentication is currently in public preview the Kerberos setting for Azure Bastion can be configured in the Azure portal only. This is currently documented here in consideration section.

If it helps you can assign RBAC roles to the users denying them access in enabling this feature. Additional reference: https://learn.microsoft.com/en-us/azure/bastion/bastion-faq#roles Hope this helps! Please let me know if you have any additional questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

How do I create a policy to prevent the use of Kerberos Authentication for Bastion?

1 answer

Your answer