MonitorWare Knowledge Base

And I cannot enable (re-enable?) the built-in account in Active Directory. Any thoughts about problems this could create, and/or how to enable it?

Fred

The Kerberos key distribution center (KDC) uses this account. "Krbtgt" is part of the KDC's service principal name (SPN). Also, a symmetric key is derived from the password of krbtgt, and this key is used to encrypt and decrypt TGTs. Only the KDC knows this password and it changes the password periodically.

I have the same problem. Has anyone figured how to enable?

This account is used in Win2K & greater to issue a TGT. This account is disabled by default and is need for the Kerberos Authentication Protocol. This ia built account and is created during the dcpromo process (when you raise your machine into a Domain Controller) on a DC

The following KB articles would give more information on this question

http://support.microsoft.com/default.aspx?scid=kb;en-us;229909
[url=http://support.microsoft.com/default.aspx?scid=kb;en-us;229909]
http://support.microsoft.com/default.as ... -us;247008[/url]