AZ-802: Administering Windows Server

Your network has an Active Directory Domain Services (AD DS) domain that includes a management server named Server1 and a privileged user named Admin1.

Admin1 uses Server1 to run Active Directory Users and Computers and the Group Policy Management Console (GPMC).

You apply a security baseline to every privileged user to prevent credential caching and delegation. After the baseline is applied, Admin1 is unable to open either console. The consoles display logon and access-denied errors.

You run klist tgt as Admin1 and receive the following error message:

0x80009030e: No credentials are available in the security package

You need to restore AD DS management access for Admin1 without changing domain-wide or server-wide authentication settings.

What should you do?