Initial configuration is simple
Setup the KDC with attention to security
The KDC database has entries for all users and all machines
Hosts providing kerberized connections are easy to set up
Clients only need to know the name of their realm and the name of their KDC
Hand-carry one file to each server