Roll over Azure Kerberos decryption key

Log onto your domain controller Navigate to \\%programfiles%\Microsoft Azure Active Directory Connect Open PowerShell as Admin (File -> PowerShell) Run the following command(s):

At the end it should say it was successfully complete. Reference