System Hardening ISM-1836 Current User accounts require Kerberos pre-authentication. Topic Microsoft Active Directory Domain Services account hardening Applicable to all History Mar 2023 User accounts require Kerberos pre-authentication. Thirteen new controls were added covering Microsoft AD DS account hardening.