Kerberos Single Sign-on extension with Apple devices

Question 1

When using Kerberos SSO extension with mobile accounts:

If you use the Kerberos SSO extension to change your Active Directory password and you’re logged in to your Mac with the same user account you’re using with the Kerberos SSO extension, password changes function as they do from the Users & Groups preference pane

A. True
B. False

Answer 1

A. True

Question 2

When using Kerberos SSO extension with mobile accounts:

If you perform an external password change—meaning you change your password on a website, or your help desk resets it—the Kerberos SSO extension can’t bring your mobile account password back in sync with your Active Directory password.

A. True
B. False

Answer 2

A. True

Question 3

When using Kerberos SSO extension with mobile accounts, using a password change URL with the Kerberos extension is supported

A. True
B. False

Answer 3

B. False

Question 4

To use the Kerberos SSO extension, you must have an Active Directory domain using ____

Answer 4

Windows Server 2008 or later