This script will enable you to reset the krbtgt account password and related keys while minimizing the likelihood of Kerberos authentication issues being caused by the operation.
Перейти к файлу
Chris Chapin 7d819964ed Update README.md 2024-03-07 10:29:52 -05:00
v1 integrating newer version 2020-05-12 16:01:42 -04:00
CODE_OF_CONDUCT.md Initial CODE_OF_CONDUCT.md commit 2020-05-12 12:12:55 -07:00
Clear-KrbClientCachesForAllSessions.ps1 added client ticket cache-clearing one-liner 2020-05-14 16:36:16 -04:00
LICENSE Initial LICENSE commit 2020-05-12 12:12:58 -07:00
New-KrbtgtKeys.ps1 integrating newer version 2020-05-12 16:01:42 -04:00
README.md Update README.md 2024-03-07 10:29:52 -05:00
SECURITY.md Initial SECURITY.md commit 2020-05-12 12:12:59 -07:00

README.md

Development of this project has come to an end. It was being maintained by a few dedicated engineers from Microsoft outside of their normal work assignments in their spare time. With changing roles and responsibilities, they have moved on to other projects and no longer are able to maintain this code.

The repo will be archived at some time in the future, date to be determined. The code at the time of archive while functional, did not handle retired DCs that were offline but had not been completely removed from Active Directory. The script generates an error because it cannot reach the offline DC. Newer versions of the script that are published elsewhere reportedly address this issue. The offline DC should be removed from AD using ntdsutil, see these articles for guidance. https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

The good news is that there are other coders that have picked up maintaining this code. Some of the other resources that you can check are:

https://gist.github.com/mubix/fd0c89ec021f70023695

5666e5fcaf/Reset-KrbTgt-Password-For-RWDCs-And-RODCs.ps1

You can also check the Forks of this repo to see other versions.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.