Windows Server Summit 2024
Mar 26 2024 08:00 AM - Mar 28 2024 04:30 PM (PDT)
Microsoft Tech Community

KRBTGT Account should be added to protected groups and should we enable the AES 256 to this account?

Copper Contributor

Hello All,

 

As we know the krbtgt account is created during the domain creation, Can we add the KRBTGT Account should be added to protected groups and should we enable the AES 256 to this account?

1 Reply

Hello,
only the password change recommend, it is possible after server 2008 version.
You can read more here: https://adsecurity.org/?p=483