Set-AzureADKerberosServer : The Microsoft Entra ID Kerberos Server object in Active Directory is missing required properties. Property: OriginatingChangeUsn Value:0

Question

Hello Team,

I am trying to create a Cloud Kerberos Trust for Windows Hello for Business, but I am facing an issue. The Kerberos Service Account "krbtgt" is not being created, and the computer object is also not being generated. What could be the cause.

Thank you.

Answer 1

@Jinalee (Jinalee Arsakulasuriya), Thanks for posting in Q&A.

Based on my researching, for the command you use, it is to rotate the Microsoft Entra Kerberos server key. But before doing this, please refer to the commands in Example 4 to firstly create the new Microsoft Entra ID Kerberos Server object And then run the previous command to rotate.

https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-passwordless-security-key-on-premises#example-4-prompt-for-cloud-credentials-using-modern-authentication

However, if the issue still persists, please open a new thread with the following tag to help on the issue.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.