Resetting the KRBTGT secret
This recipe shows how to reset the password of the KRBTGT account.
Getting ready
To reset the password for the KRBTGT account, sign in to a domain controller with a user account that is a member of the Domain Admins group.
How to do it...
Perform the following line of PowerShell:
Set-ADAccountPassword -Identity (Get-ADUser krbtgt).DistinguishedName -Reset -NewPassword (ConvertTo-SecureString "Rand0mCompl3xP@ssw0rd!" -AsPlainText -Force)
Replace Rand0mCompl3xP@ssw0rd! with the new complex password for the KRBTGT user object.
How it works...
Each Active Directory domain in a multi-domain environment has its own KRBTGT account used by all fully writable domain controllers. Each read-only domain controller has its own KRBTGT_* account.
The password hash for the KRBTGT account is used as the secret to encrypt all Kerberos tickets.
The password for KRBTGT is set during the creation of an Active Directory domain. Microsoft...
