Solved

krbtgt account still needed?

Posted on 2011-03-09

2 solutions

Medium Priority

656 Views

Last Modified: 2012-06-21

I have a W2K3 functional level domain. In doing some housecleaning of legacy/unneeded accts in AD, I noticed the krbtgt acct. In brief research, I found that it is what I suspected...an acct used by Kerberos. But, from what I've read, it was used in W2K domains. My question - is it still used in W2K3 domains? I assume yes, but wanted to verify. Any documentation/link for verification would be great.

Thanks.

Comment

Question by:coolsport00

[X]

Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

Help others & share knowledge
Earn cash & points
Learn & ask questions

Join The Community

3 Comments

LVL 15

Accepted Solution

by:JBond2010

JBond2010 earned 1000 total points

ID: 350838692011-03-09

Yes, it is. Kerberos is the authentication protocol used on Windows for authenticating clients on a domain.

LVL 74

Assisted Solution

by:Glen Knight

Glen Knight earned 1000 total points

ID: 350839142011-03-09

It is very much still required, don't make any changes to this account

LVL 40

Author Comment

by:coolsport00

ID: 350839312011-03-09

I thought so...it was almost embarrassing to ask the question :P I just wish I could've found some resource saying it was still used, because what I found only referenced this acct when implementing a W2K domain. Thanks guys...

Regards,
~coolsport00

Featured Post

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security updates for Microsoft End of Life operating systems..

Article by: Andrew

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP, Windows Server…

Assign Office 365 Licenses with Active Directory Groups

Article by: Shaun

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.

Transferring Active Directory FSMO Roles to a Windows 2012 Domain Controller

Video by: Rodney

This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

Mass Updating Active Directory From a Text File

Video by: Kevin

This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.