diff --git a/windows/client-management/mdm/policy-csp-kerberos.md b/windows/client-management/mdm/policy-csp-kerberos.md
index ef2ec926d4..95b4864abc 100644
--- a/windows/client-management/mdm/policy-csp-kerberos.md
+++ b/windows/client-management/mdm/policy-csp-kerberos.md
@@ -24,6 +24,9 @@ manager: dansimp
Kerberos/AllowForestSearchOrder
+
+ Kerberos/CloudKerberosTicketRetrievalEnabled
+
Kerberos/KerberosClientSupportsClaimsCompoundArmor
@@ -100,6 +103,58 @@ ADMX Info:
+
+**Kerberos/CloudKerberosTicketRetrievalEnabled**
+
+
+
+|Edition|Windows 10|Windows 11|
+|--- |--- |--- |
+|Home|No|No|
+|Pro|Yes|Yes|
+|Business|Yes|Yes|
+|Enterprise|Yes|Yes|
+|Education|Yes|Yes|
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+This policy allows retrieving the cloud Kerberos ticket during the logon.
+
+- If you disable (0) or do not configure this policy setting, the cloud Kerberos ticket is not retrieved during the logon.
+
+- If you enable (1) this policy, the cloud Kerberos ticket is retrieved during the logon.
+
+
+
+Valid values:
+0 (default) - Disabled.
+1 - Enabled.
+
+
+
+
+ADMX Info:
+- GP Friendly name: *Allow retrieving the cloud Kerberos ticket during the logon*
+- GP name: *CloudKerberosTicketRetrievalEnabled*
+- GP path: *System/Kerberos*
+- GP ADMX file name: *Kerberos.admx*
+
+
+
+
+
+
**Kerberos/KerberosClientSupportsClaimsCompoundArmor**