Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) RT-Send-CC: X-RT-Original-Encoding: iso-8859-1 Content-Length: 404 The key for non-Server versions of Windows is HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos AllowTGTSessionKey = 0x1 (DWORD) This is set by the KFW installers. Although we are not currently setting the MSLSA as the default cache I am going to close this ticket at this point because significant progress has been made to improve the interoperability of the LSA cache. See ticket 2705.