This attribute determines the time period, in days, during which a user's ticket-granting ticket (TGT) can be renewed for purposes of Kerberos authentication. The default setting is 7 days in the Default Domain Group Policy object (GPO).
| Entry |
Value |
| CN |
Max-Renew-Age |
| Ldap-Display-Name |
maxRenewAge |
| Size |
- |
| Update Privilege |
- |
| Update Frequency |
- |
| Attribute-Id |
1.2.840.113556.1.4.75 |
| System-Id-Guid |
bf9679bc-0de6-11d0-a285-00aa003049e2 |
| Syntax |
Interval |
Implementations
Windows 2000 Server
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000000 |
| System-Flags |
0x00000010 |
| Classes used in |
Domain-Policy
|
Windows Server 2003
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000000 |
| System-Flags |
0x00000010 |
| Classes used in |
Domain-Policy
|
Windows Server 2003 R2
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000000 |
| System-Flags |
0x00000010 |
| Classes used in |
Domain-Policy
|
Windows Server 2008
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000000 |
| System-Flags |
0x00000010 |
| Classes used in |
Domain-Policy
|
Windows Server 2008 R2
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000000 |
| System-Flags |
0x00000010 |
| Classes used in |
Domain-Policy
|
Windows Server 2012
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000000 |
| System-Flags |
0x00000010 |
| Classes used in |
Domain-Policy
|