{"id":162,"title":"KRBTGT hesab\u0131n\u0131n Active Directory'de g\u00fcvenli bir \u015fekilde s\u0131f\u0131rlanmas\u0131","content":"KRBTGT hesab\u0131n\u0131n Active Directory'de g\u00fcvenli bir \u015fekilde s\u0131f\u0131rlanmas\u0131 1. Temel Komut: powershell PowerShell ile KRBTGT s\u0131f\u0131rlama Reset-KrbtgtKeyPassword -DomainController \"DC01.domain.local\" \u0130ki kez s\u0131f\u0131rlama (\u00f6nerilen) Reset-KrbtgtKeyPassword -DomainController \"DC01.domain.local\" -TwiceReset 2. Test Modu: powershell Test modunda \u00e7al\u0131\u015ft\u0131rma Reset-KrbtgtKeyPassword -WhatIf Detayl\u0131 log ile test Reset-KrbtgtKeyPassword -Verbose -WhatIf 3. S\u0131f\u0131rlama \u00d6ncesi Kontroller: - DC replikasyonunu kontrol edin - Backup al\u0131n - Kullan\u0131c\u0131lar\u0131 bilgilendirin - Maintenance window planlay\u0131n - Test ortam\u0131nda deneyin 4. Manuel S\u0131f\u0131rlama Ad\u0131mlar\u0131: powershell KRBTGT hesab\u0131n\u0131 bulma Get-ADUser krbtgt \u015eifre s\u0131f\u0131rlama Set-ADAccountPassword krbtgt -Reset -NewPassword (ConvertTo-SecureString -AsPlainText \"ComplexPass123!\" -Force) Hesab\u0131 devre d\u0131\u015f\u0131 b\u0131rakma ve tekrar aktif etme Disable-ADAccount krbtgt Enable-ADAccount krbtgt 5. Replikasyon Kontrol\u00fc: powershell Replikasyon durumu kontrol\u00fc repadmin \/replsummary repadmin \/showrepl 6. \u0130yi Uygulama \u00d6nerileri: - \u0130ki kez s\u0131f\u0131rlama yap\u0131n - DC replikasyonunu bekleyin - Kritik servisleri monit\u00f6r edin - Kullan\u0131c\u0131 etkisini g\u00f6zlemleyin - Rollback plan\u0131 haz\u0131rlay\u0131n 7. S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar: - Kerberos ticket sorunlar\u0131 - Login problemleri - Replikasyon gecikmeleri - Service account sorunlar\u0131 - Trust ili\u015fkisi problemleri 8. Acil Durum Prosed\u00fcr\u00fc: - Backup'tan geri d\u00f6n\u00fc\u015f - Emergency access plan\u0131 - Kritik servis listesi - \u0130leti\u015fim plan\u0131 - Escalation matrix 9. Monitor Edilmesi Gereken Olaylar: - Event ID 4769 (Kerberos Service Ticket) - Event ID 4771 (Kerberos Pre-Authentication) - Event ID 4768 (Kerberos TGT) - Replikasyon olaylar\u0131 - Login hatalar\u0131 10. Post-Reset Kontroller: - Service account'lar\u0131 test edin - Kullan\u0131c\u0131 login'lerini kontrol edin - Replikasyonu do\u011frulay\u0131n - Trust ili\u015fkilerini test edin - Kritik uygulamalar\u0131 kontrol edin","excerpt":"KRBTGT hesab\u0131n\u0131n Active Directory'de g\u00fcvenli bir \u015fekilde s\u0131f\u0131rlanmas\u0131","created_at":"2025-02-06 18:29:58","updated_at":"2026-09-08 03:06:42","category_id":7,"view_count":816,"reading_time":2,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-02-06 18:29:58","featured_image":"resimyok.jpg","slug":"krbtgt-hesabinin-active-directory-de-guvenli-bir-sekilde-sifirlanmasi","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"}