{"id":1672,"date":"2009-09-15T13:17:50","date_gmt":"2009-09-15T21:17:50","guid":{"rendered":"https:\/\/www.zubairalexander.com\/stage\/?p=1672"},"modified":"2009-09-18T12:00:56","modified_gmt":"2009-09-18T20:00:56","slug":"why-is-krbtgt-account-in-windows-sever-2003-disabled","status":"publish","type":"post","link":"https:\/\/www.zubairalexander.com\/blog\/why-is-krbtgt-account-in-windows-sever-2003-disabled\/","title":{"rendered":"Why is KRBTGT account in Windows Sever 2003 disabled?"},"content":{"rendered":"<p>The reason that the KRBTGT account is disabled in Windows 2000\/2003 Server is that there is no reason or need for someone to be logging in with the KRBTGT domain account. Therefore, it cannot be enabled. Because it is a built-in account, you cannot enable or rename KRBTGT account. If\u00a0 you try to rename the account you will get the error:<\/p>\n<blockquote><p>One of the names could not be changed due to the following problem:<br \/>\nCannot perform this operation on built-in accounts.<br \/>\nPlease try again.<\/p><\/blockquote>\n<p>If you try to enable the account you will get the error:<\/p>\n<blockquote><p>Krbtgt could not be enabled due to the following problem:<br \/>\nCannot perform this operation on built-in accounts.<\/p><\/blockquote>\n<p>Kerberos is the default authentication protocol in Windows 2000\/2003. The KRBTGT account is used for Kerberos Ticket Granting Ticket (TGT). TGT\u00a0 is a ticket that must be presented to the Kerberos service when a session request is made. The TGT is enciphered with a key that is derived from the password of the KRBTGT account, which is known only to the Kerberos service. As administrators we don&#8217;t need to mess with this account.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The reason that the KRBTGT account is disabled in Windows 2000\/2003 Server is that there is no reason or need for someone to be logging in with the KRBTGT domain account. Therefore, it cannot be enabled. Because it is a built-in account, you cannot enable or rename KRBTGT account. If\u00a0 you try to rename the [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[6,11,48,38],"tags":[],"class_list":["post-1672","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-tips-tricks","category-windows-2000","category-windows-2003"],"aioseo_notices":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/1672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/comments?post=1672"}],"version-history":[{"count":0,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/1672\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/media?parent=1672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/categories?post=1672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/tags?post=1672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}