diff --git a/library/adenroll.c b/library/adenroll.c
index 3f3e51a..820541b 100644
--- a/library/adenroll.c
+++ b/library/adenroll.c
@@ -1947,8 +1947,10 @@ krb5_enctype *
 adcli_enroll_get_keytab_enctypes (adcli_enroll *enroll)
 {
 	static krb5_enctype default_enctypes[] = {
+#if 0
 		ENCTYPE_AES256_CTS_HMAC_SHA1_96,
 		ENCTYPE_AES128_CTS_HMAC_SHA1_96,
+#endif
 		ENCTYPE_DES3_CBC_SHA1,
 		ENCTYPE_ARCFOUR_HMAC,
 		ENCTYPE_DES_CBC_MD5,