Checking and verifying Azure AD Kerberos for Hybrid Azure AD & OnPremise AD setup?

Question

How can I check and verify Azure AD Kerberos is already set up in my current Azure Tenant or my OnPremise AD DS?

Because I cannot find the AzureADKerberos computer object and the krbtgt AD object is currently disabled.

I am running hybrid Azure / Entra AD and OnPremise AD DS synchronised using Azure AD connect.

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-security-key-on-premises#create-a-kerberos-server-object

Answer 1

@EnterpriseArchitect

Thank you for posting your query on Microsoft Q&A. From above description I could understand that you want to view and verify the existing created Microsoft Entra Kerberos server.

If this is not the case then please confirm for what service you want to validate if Kerberos authentication is enabled say storage, azure application proxy etc.

You can view and verify the newly created Microsoft Entra Kerberos server by using the following command:

# When prompted to provide domain credentials use the userprincipalname format for the username instead of domain\username

Get-AzureADKerberosServer -Domain $domain -UserPrincipalName $userPrincipalName -DomainCredential (get-credential)

This command outputs the properties of the Microsoft Entra Kerberos server. You can review the properties to verify that everything is in good order.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.