OK, I've lost 2 days searching for this ... maybe someone will see and answer this. How can I get, from a .NET program (preferably C#) the "service ticket lifetime" Kerberos setting on a Windows 2008 and 2003 Active Directory server? I am referring to the values you can set in Group Policy Manager, under Default Domain Policy / Edit / Windows Settings / Security Settings / Kerberos Policy