KRBTGT User Account Cannot Be Enabled in Active Directory (247008)



The information in this article applies to:

  • Microsoft Windows 2000 Server

This article was previously published under Q247008

SYMPTOMS

After you run the DCPromo utility to install the Active Directory on a domain controller running Microsoft Windows 2000 Server, the KRBTGT user account is disabled by default. When you try to enable it in the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in, you cannot do so.

CAUSE

This behavior occurs because the KRBTGT user account is only for Kerberos authentication.

STATUS

This behavior is by design.

Modification Type:MajorLast Reviewed:10/9/2002
Keywords:kbbug KB247008