Maximum lifetime for user ticket renewal

Computer Configuration\Windows Settings\Security Settings\Account Policies\Kerberos Policy

Description

Determines the period of time (in days) during which a user's ticket-granting ticket (TGT) may be renewed.

By default, this setting is set to 7 days in the Default Domain Group Policy object (GPO).