Re: krbtgt Account

The account is disabled by default.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



George Schneider wrote:
The previous network admin had disabled it. I was wondering if I should have it enabled. What does this account do?

"Roger Abell [MVP]" wrote:

Leave the account as it is.
This is the credential under which the issuance of initial Kerberos
service tickets happens.

"George Schneider" <georgedschneider@xxxxxxxxxxxxxx> wrote in message news:EE83BD50-A084-4CB2-AF84-5740E87F9F7B@xxxxxxxxxxxxxxxx
Currently in our domain the krntgt user account is diabled. Should this
account be enabled?


.

Relevant Pages

  • Re: User Creation template terminal services profile DSADD
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... When creating a "template" user account all references to %username% are directly replaced with the template name. ... When trying the DSADD to create the accounts, DSADD does not seem to support the terminal services profile properties. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to prohibit an interactive logon and authorize an Ldap access
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... place of ADS_UF_NORMAL_ACCOUNT when creating the account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Field greyed out when account ops try to unlock account
    ... Look at the permissions on the problem account with dsacls, ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating Administration to a user.
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... his OU, disable his accounts, and unlock user accouonts. ... account but cannot unlock a locked account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Reset password on krbtgt account?
    ... the account should be disabled. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.security)