Resetting krbtgt account password in a multi-Domain Forest

Copper Contributor

We have two Active Directory Domains, Domain A (parent Domain) and Domain (child Domain). Following an audit recommendation, I need to reset the krbtgt account's password in both Domains.

There are four DCs in each Domain, all replicating to each other.

 

In which Domain should I reset the krbtgt account's password first, in the parent Domain or in the child Domain?

 

Once password reset 1 and password reset 2 of krbtgt account is done (after a waiting time of 10 hours) in the first Domain, how much time should I wait before proceeding with krbtgt account's password reset in the second Domain?

0 Replies