SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How do you switch a SharePoint farm / site collection from NTLM to Kerberos?

It seems that there more to it than selecting Kerberos in:

 Central Administration > Application Management > Authentication Providers > Edit Authentication    
share|improve this question
up vote 1 down vote accepted

Kerberos is actually configured at the web application level. So you do have the option of setting it for your primary site collection, for example, but not for central administration if you wanted to.

Here is a link to get you started. There is actually a lot to it.

My recommendation would be to create a new web application with its own site collection specifically for testing your kerberos set up. Set the switch you mention above on the new web app only when you are ready to test. The reason I say that is because if you set it on your Central Admin or production web app and it doesn't work, then you may not be able to authenticate to get back in and change it back.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.