Use this command to import the Windows Logon Session Identity credentials into a MIT Kerberos credential cache. Importing tickets will not result in the destruction of existing tickets. If the imported identity is the default identity, the MIT credential cache will be used in preference to the Windows logon cache for applications written to the MIT Kerberos or GSS programming interfaces.
This action can be invoked by:
In addition, the Kerberos v5 configuration pane accessible via the Options menu contain settings that control when the importing of credentials are performed at startup.
On Windows Vista, Windows 7, and Windows Server 2008 the operating system does not permit the importation of the Kerberos Ticket Granting Ticket if the active user account is a member of the Administrators or Domain Administrators groups and User Account Control (UAC) mode is active.