Symptom
If you are trying to update to the Windows 10 May 2019 Feature Update (Windows 10, version 1903), you may encounter an update compatibility hold and receive the message, "Domain connected devices that use MIT Kerberos realms: Your PC settings aren't support yet on this version of Windows 10. Microsoft is working to support your settings soon. No action is needed. Windows Update will offer this version of Windows 10 automatically when these settings are supported."
Cause
Devices connected to a domain that is configured to use MIT Kerberos realms will not start up or may continue to restart after installation of Windows 10 May 2019 Feature Update (Windows 10, version 1903). Devices that are domain controllers or domain members are both affected.
If you are not sure if your device is affected, contact your administrator. Advanced users can check if this registry key exists HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\MitRealms or for “Define interoperable Kerberos v5 realm settings” policy under Computer Configuration -> Policies -> Administrative Templates > System -> Kerberos.
Next steps
This issue was resolved in KB4512941 and the safeguard hold has been removed. Please note, it can take up to 48 hours before you can update to offered Windows 10, version 1903 or Windows Server, version 1903.
