These labs cover Kerberos in Microsoft Entra ID. Work through them in the order shown. Each one lists its prerequisites, the PowerShell you will run, and how to check the change worked.
New to the topic? Read the lab prerequisites and IAM Foundations first.
About Kerberos labs
How many Kerberos labs are there?
There is 1 Kerberos lab on Identity Bytes Labs, taking about 1.7 hours in total.
Where should I start with Kerberos?
Start with "Find Kerberoastable Service Accounts and Move Them to gMSA". Find Kerberoastable service accounts in Active Directory with PowerShell, rank them by risk, then replace one with a group Managed Service Account (gMSA).
Do I need a production tenant?
No. Every lab is designed for a free, disposable Microsoft Entra test tenant. Never run lab steps against an environment people depend on.