2
Old question, but the answers are not particularly accurate.
Windows doesn't especially care whether your computer is domain joined or not. The domain join in this stage of authentication is really just a hint to tell the client what domain it maybe should try contacting if enough information isn't present.
The way Kerberos auth works is it takes a look at ...
Only top voted, non community-wiki answers of a minimum length are eligible
