Microsoft KB Archive/247008

From BetaArchive Wiki
Knowledge Base

KRBTGT User Account Cannot Be Enabled in Active Directory

Article ID: 247008

Article Last Modified on 11/1/2006


  • Microsoft Windows 2000 Server

This article was previously published under Q247008


After you run the DCPromo utility to install the Active Directory on a domain controller running Microsoft Windows 2000 Server, the KRBTGT user account is disabled by default. When you try to enable it in the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in, you cannot do so.


This behavior occurs because the KRBTGT user account is only for Kerberos authentication.


This behavior is by design.

Additional query words: DCPromo

Keywords: kbbug kbpending KB247008