Causes
ktpass needs more info
You need to specify the user more fully, by prefacing the user name
with the domain name (NACII\) where DOMAIN name is the NetBIOS version of the AD domain.:
C:\Program Files\Support Tools>ktpass -princ ccasso/sst-vu27keb2zd2.NACII.com@NACII.COM -mapuser NACII\ccasso -pass cisco123 -out c:\test.ke
ytab -ptype KRB5_NT_PRINCIPAL +DesOnly
Targeting domain controller: sst-vu27keb2zd2.NACII.com
Using legacy password setting method
Successfully mapped ccasso/sst-vu27keb2zd2.NACII.com to ccasso.
Key created.
Output keytab to c:\test.keytab:
Account ccasso has been set for DES-only encryption.