Shlidor Blog » Active Directory http://wp.shlidor.com The Best Blog in town Mon, 07 Dec 2009 13:33:58 +0000 en hourly 1 http://wordpress.org/?v=3.0 Active Directory promotion failed in remote branch http://wp.shlidor.com/2008/08/13/active-directory-promotion-failed-in-remote-branch/ http://wp.shlidor.com/2008/08/13/active-directory-promotion-failed-in-remote-branch/#comments Wed, 13 Aug 2008 11:55:16 +0000 talshl http://www.shlidor.com/wordpress/2008/08/13/active-directory-promotion-failed-in-remote-branch/

The operation failed because:

This kerberos hack only applies in WAN environments with MTU issues.

You can change MaxPacketSize to 1 to force the clients to use Kerberos traffic over TCP. To do this, follow these steps:

1. Start Registry Editor.
2. Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ Kerberos\Parameters
Note If the Parameters key does not exist, create it now.
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type MaxPacketSize, and then press ENTER.
5. Double-click MaxPacketSize, type 1 in the Value data box, click to select the Decimal option, and then click OK.
6. Quit Registry Editor.
7. Restart your computer.
]]> http://wp.shlidor.com/2008/08/13/active-directory-promotion-failed-in-remote-branch/feed/ 0