The StrongCertificateBindingEnforcement registry key is no longer supported. The system will fully enforce strong mapping, and any certificate without a strong SID mapping will fail authentication. Monitoring and Remediation
Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\Kdc" -Name "StrongCertificateBindingEnforcement" -ErrorAction SilentlyContinue strongcertificatebindingenforcement registry key location