Active Directory promotion failed in remote branch

The operation failed because:

This kerberos hack only applies in WAN environments with MTU issues.

You can change MaxPacketSize to 1 to force the clients to use Kerberos traffic over TCP. To do this, follow these steps:

1. Start Registry Editor.
2. Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINESystemCurrentControlSetControlLsa KerberosParameters
Note If the Parameters key does not exist, create it now.
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type MaxPacketSize, and then press ENTER.
5. Double-click MaxPacketSize, type 1 in the Value data box, click to select the Decimal option, and then click OK.
6. Quit Registry Editor.
7. Restart your computer.

One thought on “Active Directory promotion failed in remote branch”

  1. Hello there! I could have sworn I’ve visited your blog before but
    after looking at some of the posts I realized it’s new to me.

    Anyways, I’m definitely delighted I came across it
    and I’ll be bookmarking it and checking back frequently!

Leave a Reply

Your email address will not be published. Required fields are marked *