On Active Directory trust settings, the option is available to enable “The other domain supports Kerberos AES Encryption“. Unfortunately, this setting is very sparsely documented by Microsoft and few resources online describes it. Common questions are: This article will answer these questions and explain the actual purpose of the “The other domain supports Kerberos AES…