ADCE: Advanced Kerberos
Near real-time and in-session update of Kerberos Tickets and Access Token.
User's Group Membership
Group membership changes and access token are updated in session.
No Replication Delays
Changes to group membership take effect without waiting for AD Replication Cycles to complete.
All statistics related to Time Sync are discarded when computer connects to AD and Windows Time is set.
Business Users save time logging off and logging in required to update Kerberos Tickets.
Computer's Group Membership
Group membership changes are updated without requiring a reboot.
Kerberos Tickets are refreshed when network connection state is changed.
User session always operates with access level reflected in AD Security Groups and User Rights.
Large Enterprise Ready
'Universal LDAP Name for Closest DC' feature facilitates large scale deployment.