Setting Up Kerberos

To use Kerberos protocol for network authentication, do the following.

Prerequisites

These instructions do not apply to the following installation scenarios:
- AgilePoint running in Windows Service mode

In a command prompt, locate the directory that contains the Adsutil.vbs file. By default, this directory is C:\Inetpub\Adminscripts.
Use the following command to enable the Negotiate process:
```
cscript adsutil.vbs set 
        w3svc/[Website]/root/NTAuthenticationProviders 
        "Negotiate,NTLM"
```
In the above command, WebSite refers to the Web site ID number.
To verify whether the command enabled Kerberos authentication, run the following command to retrieve the current values for the NTAuthenticationProviders metabase property:
```
cscript adsutil.vbs get
        w3svc/WebSite/root/NTAuthenticationProviders
```
If the Kerberos authentication is enabled, the command returns the following:
```
NTAuthenticationProviders : (STRING) "Negotiate,NTLM"
```