In the GUI (Active Directory Domains and Trusts MMC Snap-in (domain.msc
)), you can set the "The other domain supports Kerberos AES Encryption" setting for a trust relationship:
I am looking for a way to set this setting programmatically. I already reviewed the Install-ADDSDomain
PowerShell cmdlet and also the netdom TRUST
tool, but both do not seem to include an option to set the Kerberos AES encryption setting.
Can someone tell me, how I can set this setting programmatically?