Forum Discussion
Invalidating kerberos tickets via XDR?
Since we have alerts every now and then, regarding suspected Pass the Ticket-incidents, I want to know if there's a way to make a user's kerberos ticket invalid? Like we have the "Revoke Session" in ...
ckyalo
Microsoft
MicrosoftNo, It is not possible to remotely invalidate a KRBTGT . Once a Kerberos ticket is issued and sitting on a user's machine, it cannot be remotely revoked. This is a fundamental design of the Kerberos protocol. Additional Note: