Change password for krbtgt account

Question

What is the criteria that MDI uses to determine whether the https://learn.microsoft.com/en-us/defender-for-identity/security-posture-assessments/accounts#change-password-for-krbtgt-account recommendation has been completed? I'm working with an org where the passwordLastSet attribute on the krbtgt account says "never", yet this recommendation is showing "Completed".

eliofek · Answer

Sadly I don't have the answer, but will try to find someone who does...

rgsteele · Answer

I would still like an answer on this. EliOfek​ ?

eliofek · Answer

Hi, I have consulted a SME for this and he requested that you will open a support case so he can research this specific case. Can you please open such a case, and ask the support engineer to directly engage Ran Yagil from Engineering by my recommendation? Ran is the SME for this and he can check exactly what happened and why.

rgsteele · Answer

Thank you, EliOfek​ . I will do so.

Forum Discussion

Change password for krbtgt account

4 Replies

Resources