Kerberos Policy Options (continued)
nMaximum lifetime for user ticket renewal: Determines
the maximum number of days that the
same Kerberos ticket can be renewed each time a user logs on
nMaximum tolerance for
computer clock synchronization: Determines how long in minutes a client will wait until synchronizing its clock with that of the server or Active Directory it is accessing