A certificate issued by the Kerberos service running on a Microsoft Windows 2000–based network that approves an authenticated session. A ticket contains a session key, the name of the user to whom the session key was provided, the expiration time for the ticket, and additional information.
The ticket’s expiration time is configured so that the session length doesn’t exceed the period specified by the domain security policy.
If a ticket expires while a client and server have an active session open, the Kerberos service informs both the client and the server to refresh the ticket and generates a new session key for them.