The following issues might occur on writable and read-only domain controllers (DC): Kerberos service tickets and ticket-granting tickets (TGT) might not renew for non-Windows Kerberos clients when ...
To spot an attack, admins should check for ticket requests with unusual Kerberos encryption types, check for alerts from ...