HI
What is the correct procedure to follow to configure AD SSO with NAC v 4.9 in a Windows 2008 environment?
1) I assume the KTPass version should be 6.0.6001.18000
2) User has been created on AD as service account - what encryption parameters must be set on the specific account?
3) When using the ktpass command, what encryption parameters must be set i.e. +DesOnly, or can I use -crypto All ?
Much appreciated, I'm dependent on another service provide to run the ktpass and setup the windows environment. They are in the process of upgrading from 2003 to 2008 and NAC is not active yet.
I've followed a couple of discussions, but are still not certain of the above.
Regards
Eduard
PS: I've read through Cisco documents: nac-ad-sso.pdf and s_adsso.pdf.
