In default configuration of solution, management tools do not require specific configuration to be able to communicate with PDS – PDS is automatically discovered using discovery process as described here
However, there may be deployment scenarios that require configuration of management tools. Management tools are configurable via configuration values stored in the following registry path:
Currently the following configuration values are supported:
|UseSharedSPN||REG_DWORD||Setting to non-zero causes management tools to use SPN SVC/AdmPwd when authenticating with PDS When set to zero or not present at all, management tools use SPN HOST/ when authenticating with the service. See [PDS configuration](../Password-Decryption-Service/Configuration.md) for more details on when and how to configure PDS to use specific SPN. Managed by policy “PDS service runs using domain account”|
|PDSList||REG_MULTI_SZ||List of PDS instances to be used by administrative tools. When this value is specified, management tools do not USE DNS SRV records to discover PDS instances, and rather use instances specified here.
Supported format of values:
PDS instances are used in order specified in the value Managed by policy “PDS to be used”
Computer configuration/Administrative Templates/AdmPwd Enterprise/Administrative Toolspath