This article shows how to use Ktpass command in Windows Server 2008 operating system. Ktpass.exe File Download and Fix For Windows OS, dll File and exe file download.

Published: January 2000 The Microsoft Windows® 2000 operating system implementation of the Kerberos version 5 protocol is designed for interoperability with other security services based on the MIT Kerberos version 5 reference implementation. On This Page Introduction The interoperability objectives for the Windows 2000 release support the following configurations: • A Windows 2000 Server domain controller can serve as the Kerberos Key Distribution Center (KDC) server for MIT Kerberos-based client and host systems.

UNIX systems can use kinit and the DES-CBC-MD5 or DES-CBC-CRC encryption type to authenticate to the Windows 2000 KDC. • The Windows 2000 Kerberos Security Support Provider (SSP) implements the General Security Service Application Program Interface (GSS API) Kerberos Mechanism Token formats defined in RFC 1964. Windows 2000 does not provide the GSS API; instead, the Kerberos support is available to Microsoft Win32 applications using the SSPI APIs implemented by the Kerberos SSP. Client applications on UNIX using GSS API can obtain session tickets to services on Windows 2000, and can complete mutual authentication, message integrity, and confidentiality. (Context flags that are verified are GSS_C_MUTUAL_FLAG, GSS_C_REPLAY_FLAG, GSS_C_CONF_FLAG, GSS_C_INTEG_FLAG.) • Windows 2000 Professional clients can be configured to use a Kerberos realm, with single sign-on to the Kerberos realm and the local Windows 2000 Professional-based client account. Interoperability with Kerberos services requires minor configuration changes from the default installation. For example, a Windows 2000 workstation that uses a Kerberos realm must be configured to locate the Kerberos realm, available KDC servers and available Kerberos change password servers.

Microsoft provides command-line tools to help with the configuration steps. These tools are: • Ksetup. Configures Kerberos realms, KDCs, and Kpasswd servers. Sets the password, account name mappings, and keytab generation for Kerberos services that use the Windows 2000 Kerberos KDC. The Kerberos configuration utilities are available on the Windows 2000 distribution media, in the support reskit netmgmt security folder. The Kerberos test utilities are available in the Windows 2000 software development kit (SDK), in the mssdk samples winbase security win2000 folder. These tools are: • Gssclient. Bentley Object Enablers For Autocad.