KRBTGT User Account Cannot Be Enabled in Active Directory

ID: Q247008


The information in this article applies to:
  • Microsoft Windows 2000 Server


SYMPTOMS

After you run the DCPromo utility to install the Active Directory on a domain controller running Microsoft Windows 2000 Server, the KRBTGT user account is disabled by default. When you try to enable it in the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in, you cannot do so.


CAUSE

This behavior occurs because the KRBTGT user account is only for Kerberos authentication.


STATUS

This behavior is by design.

Additional query words: DCPromo

Keywords :
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbbug


Last Reviewed: December 29, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.