authenticating logons with Kerberos

I’ve been reading about Kereros.

On a domain controller, is the default method for client logons done with Kerboeros, or is the standard User name and passowrd used only?

If Kerberos is used for logons, is the KDC automatically installed on a domain controller?

Is there any reference materail you can recommend?