How to return the encryption type settings?

Question

Active Directory

Hello
everyone The task has arrived, to force everyone to change the password.
I created a request, selected all the found users and set in the properties "require to change the password when logging in.
" the system gives an error "The required type of encryption is not supported by this Kerberos-Domain Controller (KDC)"
Tell me what's wrong and how to fix
ps now restored the work by expanding the backup. But I want to get to the bottom of the truth.