Changing krbtgt password
Wright, John M
I’d like to start regularly changing our krbtgt password. But I have two questions.
- Between the recently updated script here: https://github.com/zjorz/Public-AD-Scripts/blob/master/Reset-KrbTgt-Password-For-RWDCs-And-RODCs.ps1 and the abandoned MS script here (https://github.com/microsoftarchive/New-KrbtgtKeys.ps1), would you say that it would be better to use the former? (I assume it is but wasn’t sure anyone had experience with both.)
- Also, is there any difference between changing the krbtgt “keys” and changing the “password?” My understanding is that the former is derived from the latter, so they amount to the same thing.
--
John Wright
IT Support Specialist
1800 Old Bluegrass Avenue, Louisville, KY 40215
Please submit IT requests to Hazelwoo...@bluegrass.org
24 Hour Helpline 1.800.928.8000
CONFIDENTIALITY NOTICE: This message contains confidential information and is intended only for the individual(s) addressed in the message. If you are not the named addressee, you should not disseminate, distribute, or copy this e-mail. If you are not the intended recipient, you are notified that disclosing, distributing, or copying this e-mail is strictly prohibited.
Michael B. Smith
[1] Use Jorge’s script (the first one).
[2] You change the password. The keys are regenerated automatically when you do that.
--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
ntsysadmin+...@googlegroups.com.
To view this discussion visit
https://groups.google.com/d/msgid/ntsysadmin/SN7PR12MB671445DF8073FA71E473F50F912CA%40SN7PR12MB6714.namprd12.prod.outlook.com.
Kurt Buff
--
Wright, John M
Sent: Thursday, August 7, 2025 8:57:43 AM
To: ntsys...@googlegroups.com <ntsys...@googlegroups.com>
Subject: [ntsysadmin] RE: Changing krbtgt password
| Caution: This sender resembles a person within your organization (Smith, Micah). Please exercise caution and validate the sender's identity before replying or taking further action. |
| Secured by Check Point |