Be sure to check the new Authentication Guide for an overview of the different authentication scenarios.

Enhancements

• Kerberos
  • PKINIT
    • PKINIT freshness
  • U2U
  • Ticket decryption
  • Print authorization data
• LDAP
  • SSL channel binding and certificate-based authentication
  • Supported for named bits
  • Shorthand notation for BIT_OR, BIT_AND, and TRANSITIVE_EVAL
• Security
  • Object security models for common object types
  • Parse and generate SDDL strings
  • SPN overriding
  • Better support for well-known security principals
• Cryptography
  • Diffie-Hellman MODP key exchange
• Reg command
  • SAM dump
  • LSA secrets
  • Get system key
  • Access registry with backup semantics
• Dcom standalone utility
  • Activate and invoke on a remote automation object
• Sddl command
  • Describe SDDL descriptor
• CLI
  • Support for dynamic output fields
  • Relative parameter ordering

Files