Hello,

I am trying to change the Web Proxy Client Authentication on a domain joined TMG 2010 EMS Managed Array from NTLM to Kerberos Authentication. I initiated the change as described in the article below from one of the TWO node members, Firewall and other Services started successfully with the Exception of the NLB Service.

I also noticed that there was an error updating the EMS configuration store while checking the Monitoring view after making the change

https://technet.microsoft.com/en-us/library/hh454304.aspx

Must I initiate the change on the EMS or could this be case of an insufficient privilege with the account used in making the ch

Hi,

In Ori Yosefi's blog, "In order to be able to use Kerberos when connecting to the FQDN of each individual node, we recommend to register the additional SPNs for each FQDN on the service account as well."

New in SP2: Kerberos Authentication in Load Balanced Scenarios

You also have to close and re-open the TMG MMC console on the EMS

Best Regards,

Joyce