APM V11.1HF1 querying Active Directory

it see that we have some KERBEROS issue to negotiate encryption standards while using password change challenge, However we don’t have this problem when we just authenticate users without that prompt

Basically it failed on DES from APM to Win2008 server but not sure why its not an issue with just simple authentication though.