Home > System-Wide Updates
See System Status for the most current information
Future Updates:
January 2010
Re: Kerberos Realm UMN.EDU abatement:
Trust to the UMN.EDU Kerberos realm will be disabled.
Completed Updates:
Wednesday, August 05, 2009 9:19 AM
Re: Updates regarding the Kerberos Realm UMN.EDU abatement:
This work has been completed. Vista/Server 2008 and new Windows operating systems will now set the default logon domain to be whatever domain the computer is joined to (in our case, AD). Units that manually set this to specify AD, may remove that settings from their group policies.
Please send comments or questions to umnad@umn.edu
Thursday, July 16, 2009 3:52 PM
Re: Updates regarding the Kerberos Realm UMN.EDU abatement:
It has been over 2 months since Internet ID passwords have been synchronized into UMNAD and plans continue to move away from the UMN.EDU Kerberos Realm server for authentication.
Below are system-specific details regarding modifications which need to be made in preparation of UMNAD de-coupling completely from the UMN.EDU Kerberos Realm in early January 2010; before the onset of Spring 2010 classes. Now is the best time to make the changes, especially if you will be performing large scale rollouts this fall.
Windows Vista Clients:
The Default Logon Domain within the Default Security Policy will be changed from UMN.EDU (MIT Kerberos Realm) to ad.umn.edu. on Wednesday, July 29, 2009 at 9 AM. The end-user experience (logon, desktop settings, etc). will not be affected by this change and all settings will be retained when logging into the ad.umn.edu domain.
Windows XP clients:
Windows XP clients will not be affected by the above change, as the UMN.EDU {Kerberos Realm} settings are stored locally in the workstation registry. Individuals should instead logon using the ad.umn.edu domain. While they can simply ignore the UMN.EDU {Kerberos Realm} option, if you prefer to remove this option, it can be uninstalled from the Add/Remove Programs menu. UMNAD is working to put together a Configuration manager package to remove this as well and will let you know when it becomes available.
Macintosh Clients:
As stated in May, Macintosh clients can now bind to UMNAD with the built-in Directory Utility. Updated instructions are here: http://www.umn.edu/umnad/guides/index.html, How To Join 10.5.x Macintosh Clients. The legacy binding tools are no longer needed and must be removed prior to the January 2010 decoupling.
