Re: What is the builtin user krdtgt?

From: Rajkumar Mohanram [MSFT] (rajkm@online.microsoft.com)
Date: 03/21/03


From: "Rajkumar Mohanram [MSFT]" <rajkm@online.microsoft.com>
Date: Fri, 21 Mar 2003 12:09:41 -0800


I am assuming you meant the krbtgt account. This account is used in Win2K &
greater to issue a TGT. This account is disabled by default and is need for
the Kerberos Authentication Protocol. This ia built account and is created
during the dcpromo process (when you raise your machine into a Domain
Controller) on a DC

The following KB articles would give more information on this question

http://support.microsoft.com/default.aspx?scid=kb;en-us;229909
http://support.microsoft.com/default.aspx?scid=kb;en-us;247008

--
Rajkumar Mohanram [MSFT]
Windows Security - Kerberos
This posting is provided "AS IS" with no warranties, and confers no rights.
.
"Lauren" <LaurenA@bachgrp.com> wrote in message
news:292801c2ef5c$e32d9440$3401280a@phx.gbl...
> Key Distribution Center Service Account - Where, when and
> how did this account appear on my users group and what
> actually does it do?
>
> Lauren


Relevant Pages

  • Re: Imp/exp and VNI-2015
    ... I restarted the Management Server and tried to log in again but got the same message. ... Is this because I am running a Win2K professional rather than Win2K server? ... This is a bit confusing because the node is a very simple declaration and I have tried both my own local account and the 'oracle' account which I set up. ... privilege 'Log on as batch job'. ...
    (comp.databases.oracle.server)
  • Re: SP4 and n-2 password protection?
    ... DC from SP3 and a win2K server. ... account was locked out. ... Win2k SP4 DC in Native mode with Exchange 2K ...
    (microsoft.public.win2000.security)
  • Re: Windows Server 2003 caches UNC Password
    ... Thanks for the advice. ... To copy files in daily schedule from Win2K3 to Win2K. ... There is a operator account in the Win2K server. ... What would be the best practice for this situation? ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Imp/exp and VNI-2015
    ... I restarted the Management Server and tried to log in again but got the same message. ... Is this because I am running a Win2K professional rather than Win2K server? ... This is a bit confusing because the node is a very simple declaration and I have tried both my own local account and the 'oracle' account which I set up. ...
    (comp.databases.oracle.server)
  • Continuous Win2K User Account Lockout
    ... Scenario is Win2K AD domain controllers, Win2K servers and user is logging in ... forgotten about using is continually locking out her account since she has ... Call ticket number 00163501 has been assigned to your Group. ... Call Type: Server Soft Misc UsrRqust ...
    (microsoft.public.win2000.general)