Windows: Keep tokens in an AD environment

Hi Christian,

If I recall correctly, the NIM would refresh the token if it also refreshed the ticket. I used it in a Linux-KDC environment, though. So, when Windows does that by itself, I wouldn't know if NIM is able to keep track of it. So, you could try to let NIM refresh the ticket after initial acquisition.

I would go for the cheap timed-task option. I usually update after half the lifetime. This is what I do on Linux hosts as well.

Kind regards,
–Michael