I thought Kerberos was enabled in Lync 2013 by default but it's not. Just wondering if it's necessary to enable it and assign it to the site. Seems easy enough to do but was wondering about the downside. Our environment is 3 Lync 2013 FE servers in an Enterprise Pool. 1 PC server. 1 Web Access Server. Still have a single Lync 2010 Standard Edition FE we are in the process of decommissioning and a Lync 2010 Edge. Most of our clients are Windows XP SP3 with Lync 2010 if it matters. Just wondering if its worth it as things seem to working just fine now.
Only reason I found this is I ran the BPA for Lync 2013 and it told me I did not have Kerberos enabled for the Site. Article below does a good job of stepping you through enabling it.
http://howdouc.blogspot.com/2011/07/kerberos-web-authentication-for-lync.html