Using a .Net client and WSE 2.0, if I create a new Kerberos token for a
User Account in Active Directory, it works as long as the "Use DES type
encryption for this account" option is off in user's options in Active
Directory.

But if you execute the keytab command to export the keytab from Active
Directory, the DES option is enabled for that user account that you
exported.

I am using the a call that looks something like this to create a new
Kereberos token:

   KerberosToken kerbToken = new KerberosToken(targetPrincipalName);

 Is there a way to tell the WSE API to use DES?

-jjct