Configure Microsoft Entra Kerberos trust
Doc updateThe documentation now covers prerequisites, PowerShell module installation, Trusted Domain Object creation, client ticket configuration, key rotation, and trust removal.
Keep up with Microsoft Entra
Daily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
Day in brief
New Entra Kerberos trust guide covers setup and rotation as standalone guidance disappears
Microsoft added a full configuration path for Microsoft Entra Kerberos trust, from prerequisites and PowerShell installation through trust removal, while deleting the standalone server-key-rotation article. A separate update identifies key rotation as generally available for incoming trust referral flows and records a June 15, 2026 baseline-scope enforcement rollout, with a Graph query for affected Conditional Access policies.
- Microsoft Entra Kerberos trust gains end-to-end configuration guidance
Entra ID · AuthenticationThe new article documents prerequisites, required permissions, PowerShell module installation, Trusted Domain Object creation, client ticket configuration, key rotation, and trust removal for Kerberos trust between Microsoft Entra ID and on-premises AD DS.
- Key rotation is described as generally available for incoming trust referralsEntra ID · Authentication
The updated What's New entry says generally available key rotation improves reliability for incoming trust referral flows and addresses authentication failures that occurred when referral tickets used a secondary key. No required administrator action is stated.
- Standalone Kerberos server-key-rotation guidance is removedEntra ID · Authentication
Microsoft deleted the article covering Kerberos server-key-rotation prerequisites, dual-key behavior, and the Set-AzureADKerberosServer procedure. Administrators seeking that material must locate the instructions elsewhere in the documentation.
- Baseline-scope enforcement guidance adds rollout timing and policy discovery
Entra ID · Conditional AccessThe Conditional Access page now states that baseline-scope enforcement rollout began June 15, 2026, adds a Microsoft Graph query for affected policies, and clarifies customization and sign-in review guidance.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
4 updates
Microsoft Entra ID
4 updatesWhats New
Generally availableThe documentation states that generally available key rotation improves reliability for incoming trust referral flows and addresses authentication failures caused when referral tickets used a secondary key.
Kerberos Server Key Rotation
Doc updateThe standalone article describing Kerberos server-key rotation, prerequisites, dual-key behavior, and the Set-AzureADKerberosServer procedure was deleted.
Enforcement Resource Exclusions
Doc updateThe documentation now states that baseline-scope enforcement rollout began June 15, 2026. It adds a Microsoft Graph query for finding affected Conditional Access policies and clarifies customization and sign-in review guidance.