This release adds new debug checks for storage accounts configured for Entra Kerberos:
CheckEntraJoinType
: checks the type of Entra domain join (hybrid Entra joined or Entra joined) required for Entra Kerberos.CheckFiddlerProxy
: checks if Fiddler has left behind an HTTPS proxy that captures traffic and prevents Kerberos traffic from getting to the Entra KDC.
Additionally, this release fixes some bugs in the debug command:
- Fixes a bug in the AD DS debug command's
CheckAadKerberosRegistryKeyIsOff
check. The check was only detecting if theCloudKerberosTicketRetrievalEnabled
setting was disabled via reg key, and not whether it was also disabled via Intune or GPO. It now checks all three. - Reduces noisy output on PowerShell 5 when registry keys are not found.