You might be able to harvest some useful information from http://web.mit.edu/pismere/ > > I suppose it might be possible to extract the necessary > > data from a working AD server and stuff it into another Kerberos KDC > > without knowing how the data were created, but I've not heard of anyone > > doing it.* Without this, Windows hosts will not be able to use domain > > accounts.