W2K Server "krbtgt" built-in acct

DukeChestnut

Senior member
Mar 11, 2002
349
0
0
hey guys. in active directory console i accidently disabled the krbtgt acct. when i try to enable it iget an error:

[Windows cannot enable object krbtgt because: Cannot perform this operation on built-in accounts]

any idea on how i can re-enable it?
 

stash

Diamond Member
Jun 22, 2000
5,468
0
0
The krbtgt account is part of Kerberos authentication. It can't be used to log onto a server, and you cant rename or enable it.

The account should've been disabled by default, so I dont think you actually disabled it, you just may have not noticed that it was to begin with.

Heres a Microsoft article for reference: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q229909
 

DukeChestnut

Senior member
Mar 11, 2002
349
0
0
stash,

you're absolutely right. i must have clicked the user above it and thot i was on krbtgt's acct. i feel very foolish as i just re-imaged my server to find out that it was disabled to begin with :D oh well. at least i didn't have to reconfig or do much after the re-image. (whew) but thanx for the reply stash, u obviously know ur sh!t :D