Computer Configuration\Windows Settings\Security Settings\Account Policies\Kerberos Policy
Determines the maximum amount of time (in hours) that a user's ticket-granting ticket (TGT) may be used. When a user's TGT expires, a new one must be requested or the existing one must be "renewed."
By default, this setting is set to 10 hours in the Default Domain Group Policy object (GPO).