I've got a demo cross-realm setup between MIT Kerberos and AD. Users can log in just fine as long as the machine is properly configured and the user knows that the realm is all uppercase and case sensitive. I have a feeling though, that once we roll this out to the users, quite a few will remember this, even if we go through above normal outreach. Is there any way to make the Windows 7 login screen more usable? Like automatically uppercase the realm? Or automatically default to our Kerberos realm for user auth?
You can set the default via group policy for AD 2008.
This works for kerberos realms.