1.1.10 Enforce user logon restrictions - Domain Controller
Information
This control defines Kerberos-related attributes of domain user accounts, such as the Maximum lifetime for user ticket and Enforce user logon restrictions settings.
Solution
Make sure 'Enforce user logon restrictions' is set to a minumum of 15 minutes.