Byte Hub Nuggets

Topic

active directory

A collection of 4 issues

Change the ‘krbtgt’ password

Language: English Do not delete the krbtgt accounts for the RODCs. The krbtgt account for an RODC is listed in the format krbtgt_number. If you use a customized password filter (such as passfilt.dll) on a DC, then you might receive an error when you try to reset the

Reset the DSRM password

Language: English Active Directory will always validate a new Directory Services Repair Mode password to make sure it meets the domain’s password complexity requirements; this validation also calls into password filter dlls like Microsoft Entra Password Protection. If the new DSRM password is rejected, the following error message results:

DPAPI keys Active Directory

Language: Danish Hvad er DPAPI Keys? DPAPI (Data Protection API) backup nøgler i Active Directory bruges til at beskytte og gendanne krypterede data. Når en bruger i et Active Directory-domæne krypterer data ved hjælp af DPAPI, bliver en kopi af brugerens master-nøgle krypteret med en såkaldt DPAPI Domain Backup Key,

Reset ‘AZUREADSSOACC’ Password

Language: English When configuring Seamless SSO, the computer account “AZUREADSSOACC” is created. For security reasons, the Kerberos encryption key for this account should be rolled over every 30 days. Here is how. Requirements before starting * Check if you have access to the server where the Azure AD/Entra ID Connector