Windows versions that include the Local Security Policy setting for encryption types need to enable the setting for KRB5 support.
- On the Windows KDC go to Security Options settings, for example, .
- Enable all the algorithms that are available in the menu or enable all the algorithms that are allowed to be used by your site policy.