Set delegation to reset krbtgt password

MamadouCoulibali-4946 486 Reputation points
2021-01-16T01:26:19.177+00:00

Hi,

I want give a permission to a admin account to reset krbtgt password. The permission is gone.

Can I set delegation to give permission to this account to reset krbtgt password.

Thank you in advance for your help.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,645 questions
0 comments
Accepted answer
  1. Thameur-BOURBITA 33,006 Reputation points
    2021-01-16T01:33:58.577+00:00

    Hi,

    The krbtgt Acls is protected by SDprop process, so you can't set ACLs manually on this account.

    If you want set ACLs on protected users or group you have to edit SDholder folder: CN=AdminSDHolder,CN=System,DC=<domain_component>,DC=<domain_component>

    appendix-c--protected-accounts-and-groups-in-active-directory

    ----------

    Please don't forget to mark helpful reply as answer

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.