Hi,

when running klist on windows 8, I noticed that klist list the issuing KDC of a ticket - The field is called: KDC_called.

When running klist on windows 7 and windows server 2008 I couldn't find that field. 

Is the KDC_called field new and can only viewed in Windows 8 and server 2012? Or the difference caused by the klist version itself?

Thanks.

Hi,

I have tested the Klist command in Windows 8 and Windows 7, and as you mentioned, the KDC Called field exits in Windows 8 but not in Windows 7. I just can say there is some improvements in Klist command from Windows 7 to Windows 8. You can compare the link below to find the difference in Klist command between Windows 2008 R2 and Windows 2012.

https://technet.microsoft.com/en-us/library/hh134826%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

https://technet.microsoft.com/en-us/library/Hh134826.aspx

Best Regards

Simon