Hi, I have completed the steps in this article over on the EHLO Blog: http://blogs.technet.com/b/exchange/archive/2011/04/15/recommendation-enabling-kerberos-authentication-for-mapi-clients.aspx and am waiting for the AD replication to bake. So hopefully all is good. One thing though, is that when I ran the script to deploy the credential to the CAS Arrays, it prompted to update the password (which I did.) But the thing is that I need to know what the password is, so I can enter the credentials into our RiverBed WAN optimizers. Can I reset the account password in AD, and then re-run the RollAlternateServiceAccountPassword.ps1 script, and chose NOT to update the password? Will that promulgate the existing AD password to the CAS Array members? Thanks, Tom Felts

Based on my research, you can run the following command to generate a new command: .\RollAlternateserviceAccountPassword.ps1 -ToArrayMembers *mailbox* -GenerateNewPasswordFor "Contoso\UserAccount" –Verbose For more information, please refer to the following article: http://technet.microsoft.com/en-us/library/ff808311.aspx Thanks. Novak Wu TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I modified the script to create a known password, and then verified it via powershell get-credential and getnetworkcredential().