I'm playing around with Windows Server and Active directory, with the goal of using Kerberos instead of NTLM for my SMB shares without joining my workstations to the domain. I set up a primary domain ...