Merge pull request #110116 from arcalbert/patch-1

Update troubleshoot-device-dsregcmd.md to include Cloud Kerberos fields

Author: Jak-MS

articles/active-directory/devices/troubleshoot-device-dsregcmd.md

@@ -203,6 +203,13 @@ Active Directory Federation Services (AD FS). For hybrid Azure AD-joined devices
 This field is skipped if no diagnostics information is available.
 The diagnostics information fields are same as **AcquirePrtDiagnostics**
 
+>[!NOTE]
+> The following Cloud Kerberos diagnostics fields were added in the original release of Windows 11 (version 21H2).
+
+- **OnPremTgt**: Set the state to *YES* if a Cloud Kerberos ticket to access on-premises resources is present on the device for the logged-in user.
+- **CloudTgt**: Set the state to *YES* if a Cloud Kerberos ticket to access cloud resources is present on the device for the logged-in user.
+- **KerbTopLevelNames**: List of top level Kerberos realm names for Cloud Kerberos.
+
 ### Sample SSO state output
 
 ```
@@ -228,6 +235,9 @@ The diagnostics information fields are same as **AcquirePrtDiagnostics**
    EnterprisePrtUpdateTime : 2019-01-24 19:15:33.000 UTC
    EnterprisePrtExpiryTime : 2019-02-07 19:15:33.000 UTC
     EnterprisePrtAuthority : https://fs.hybridadfs.nttest.microsoft.com:443/adfs
+                 OnPremTgt : YES
+                  CloudTgt : YES
+         KerbTopLevelNames : .windows.net,.windows.net:1433,.windows.net:3342,.azure.net,.azure.net:1433,.azure.net:3342
 
 +----------------------------------------------------------------------+
 ```
@@ -365,6 +375,14 @@ This diagnostics section performs the prerequisites check for setting up Windows
 - **LogonCertTemplateReady**: This setting is specific to WHFB Certificate Trust deployment and present only if the CertEnrollment state is *enrollment authority*. Set the state to *YES* if the state of the login certificate template is valid and helps troubleshoot the AD FS Registration Authority (RA).
 - **PreReqResult**: Provides the result of all WHFB prerequisites evaluation. Set the state to *Will Provision* if WHFB enrollment would be launched as a post-login task when the user signs in next time.
 
+>[!NOTE]
+> The following Cloud Kerberos diagnostics fields were added in the Windows 10 May 2021 update (version 21H1).
+
+>[!NOTE]
+> Prior to Windows 11 version 23H2, the setting **OnPremTGT** was named **CloudTGT**.
+
+- **OnPremTGT**: This setting is specific to Cloud Kerberos trust deployment and present only if the CertEnrollment state is *none*. Set the state to *YES* if the device has a Cloud Kerberos ticket to access on-premises resources. Prior to Windows 11 version 23H2, this setting was named **CloudTGT**.
+
 ### Sample NGC prerequisites check output
 
 ```