Microsoft needs to acknowledge this. You are extending the schema to include AES256 along with a new attribute added to a computer object. The KDC isn't fully aware of that fact until it restarts.
↧