This Nov 9th update added some new event viewer logs 35, 36, 37, 38. So basically the way dev did it was on the domain controllers there is going to be a regedit called PacRequestorEnforcement. The regedit can have different values, 0,1,2. This is where it gets really confusing.