Hi,
Beware to upgrade to Windows 2025 active directory if you have integrated your firewall management center. The Kerberos timestamp format bug reported with Cisco ISE also applies to FMC 7.4.2.1.
https://bst.cisco.com/quickview/bug/CSCwn62873
The only workaround we could establish so far is to promote additional domain controllers running on Windows 2022.