Modify the user account control flags as required for the account in question. You can try running New-CsKerberosAccount ...