In order to find which User Accounts have “Use Kerberos DES encryption types for this Account” flagged you can use the following PS cmdlet
 
get-aduser -filter {UseDESKeyOnly -eq “True”}”