Since it was a Windows security course, it would have been more useful if the capstone was something like, "Set up your own server and configure security for xyz kind of organization. Explain why you did what you did, and the benefits and drawbacks".
Or have you find flaws in a sample server and describe what you could do to mitigate
I know Kerberos is very important, but the essay project could have been part of the homework for a class, not the capstone for the whole course