This policy setting controls whether a computer requires that Kerberos message exchanges be armored when communicating with ...

Windows 10

This policy setting controls whether a computer requires that Kerberos message exchanges be armored when communicating with a domain controller.

Warning: When a domain does not support Kerberos armoring by enabling "Support Dynamic Access Control and Kerberos armoring", then all authentication for all its users will fail from computers with this policy setting enabled.

If you enable this policy setting, the client computers in the domain enforce the use of Kerberos armoring in only authentication service (AS) and ticket-granting service (TGS) message exchanges with the domain controllers. 

Note: The Kerberos Group Policy "Kerberos client support for claims, compound authentication and Kerberos armoring" must also be enabled to support Kerberos armoring. 

If you disable or do not configure this policy setting, the client computers in the domain enforce the use of Kerberos armoring when possible as supported by the target domain.

This policy setting controls the use of BitLocker on removable data drives. This policy setting is applied when you turn ... This policy setting controls the use of fast startup. If you enable this policy setting, the system requires hibernate to ... This policy setting controls when background synchronization occurs while operating in slow-link mode, and applies to any ... This policy setting controls whether a BitLocker-protected computer that is connected to a trusted wired Local Area Network ... This policy setting controls whether a computer requires that Kerberos message exchanges be armored when communicating with ... This policy setting controls whether a device always sends a compound authentication request when the resource domain requests ... This policy setting controls whether a device will automatically sign-in the last interactive user after Windows Update restarts ... This policy setting controls whether a device will request claims and compound authentication for Dynamic Access Control ... This policy setting controls whether additional data in support of error reports can be sent to Microsoft automatically. ...