disabling KRBTGT GPO

Author: kdvhh

Configs/TasksSequence_HardenAD.xml

@@ -906,11 +906,11 @@ Blocks anonymous access to SAM database.">
       <GpoFilter WMI="Windows-OS-Servers" />
       <GpoLink Path="RootDN" Enabled="Yes" Enforced="Yes" />
     </GPO>
-    <GPO BackupID="{AA731818-2050-4EE5-A0A1-088E75A458D8}" Validation="Yes" Name="HAD-Reset-KRBTGT-Password" Description="Harden AD =================== Reset the password of the krbtgt account every 30 days">
+    <!-- <GPO BackupID="{AA731818-2050-4EE5-A0A1-088E75A458D8}" Validation="Yes" Name="HAD-Reset-KRBTGT-Password" Description="Harden AD =================== Reset the password of the krbtgt account every 30 days">
       <GpoMode Mode="BOTH" Tier="Tier0" />
       <GpoLink Path="OU=Domain Controllers,RootDN" Enabled="Yes" Enforced="Yes" />
       <GpoFilter WMI="Windows-PDC" />
-    </GPO>
+    </GPO> -->
     <GPO BackupID="{3A10AD30-D95C-42C4-AD45-C7E4CBFC2F2D}" Validation="Yes" Name="HAD-RDP-Disabled" Description="Harden AD =================== Disables the RDP service and prohibits RDP connections">
       <GpoMode Mode="BOTH" Tier="Tier0" />
       <GpoLink Path="OU=Harden_TL,RootDN" Enabled="Yes" Enforced="Yes" />