1.4.2 Kerberos PAC Validation

The server operating system uses the Netlogon generic pass-through ([MS-NRPC] section 3.2.4.1) to validate the privilege attribute certificate (PAC) with the domain controller, when required.