Many of us find troubleshooting Kerberos quite a tedious task since it involves multiple levels of troubleshooting. Today, inorder to configure kerberos on IIS server we need to go through the set of steps which is really time consuming and of high complexity.

Why is Kerberos painful at times?

  • First, understanding Kerberos is quite tricky.
  • Configuration takes a lot of time as we need to look at configuration of IIS server, Domain controller and Client side.
  • Once a site breaks because of some configuration related issues, it’s really difficult to identify the exact cause because of the complexity.

To address these issues, I have created the “Kerberos Configuration Manager for IIS”. This tool configures Kerberos single hop on any site on IIS by reading and modifying the Configration files. This reduces both time spent.This tool allows one to do the following tasks:

  • Review the current settings related to Kerberos for any specific website in IIS.
  • Configures Kerberos for the affected website
  • It also has a provision to revert the changes made just in case there is a requirement.
  • It also has a feature of auditing through a log file.

Why should I use tool?

  • Troubleshooting Kerberos just becomes much simpler with this tool and it optimizes the time taken to troubleshoot from few hours to few minutes.
  • You can review the Kerberos Configuration for any of your web sites and share the generated log files with support to save precious troubleshooting time.
  • No need to install the tool -  it’s a standalone executable.
  • Disk space utilization is minimal.
  • Open source, free to download and modify.
  • Auditing support which makes troubleshooting Kerberos easier.

For documentation on how to use, follow the below blog:

https://blogs.msdn.microsoft.com/surajdixit/2018/02/07/kerberos-configuration-manager-for-internet-information-services-server/