KDC

The KDC is the trusted server at the heart of Kerberos that authenticates principals and issues tickets. It combines an authentication service, which verifies credentials, with a ticket-granting service, which issues service tickets. In Active Directory every domain controller runs a KDC, making it one of the most attacked components in enterprise networks.