Re: Group Policy / Kerberos problem - policy not applied

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

http://support.microsoft.com/default.aspx?scid=kb;en-us;883268

??

<andythebritton@xxxxxxxxx> wrote in message
news:1143046212.105171.304920@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Got a weird problem which only appears (AFAIK) on Viglen PCs with blue
mesh panels along the bottom of the base unit. They are ASUS
motherboards with SIS900 NICs.

Occasionally (and only on some of the machines), the Group Policy
fails. The following even appears in the System log (source Kerberos,
event 7)

[quote]The kerberos subsystem encountered a PAC verification failure.
This indicates that the PAC from the client ICTSUITE-04$ in realm
SJB-CURRIC.INT had a PAC which failed to verify or was modified.
Contact your system administrator.[/quote]

I have enabled verbose USERENV debug logging and the only clue in the
resulting file are lines which say

[quote]USERENV(1a4.488) 15:56:46:156 ProcessGPO: Machine does not have
access to the GPO and so will not be applied.[/quote]

I have searched high and low for a solution to this. There are a number
of suggestions which relate to Kerberos problems, but none which really
relate to my exact circumstances. There is an entry
[url=http://search.experts-exchange.com/search.jsp?query=PAC+verification&searchType=all]on
Experts Exchange in their Hot Solutions section[/url], but only
registered members can view the solution.

It's a vanilla 2K3 domain so the school does not have a software
support contract with Viglen.

Any ideas?



.

Relevant Pages

  • Group Policy / Kerberos problem - policy not applied
    ... Got a weird problem which only appears on Viglen PCs with blue ... The following even appears in the System log (source Kerberos, ... The kerberos subsystem encountered a PAC verification failure. ...
    (microsoft.public.windows.group_policy)
  • Re: XP SP2: cannot access Disk Manager (LDM) on remote Win 2000 s ystems>>>
    ... Check the System log ... System Log has Event ID 4 from Kerberos: ... Subject: XP SP2: cannot access Disk Manager on remote Win 2000 ... This email has been scanned by the MessageLabs Email Security System. ...
    (NT-Bugtraq)
  • Event Id 7
    ... Event Source: Kerberos ... The kerberos subsystem encountered a PAC verification failure. ... indicates that the PAC from the client HELIOS2$ in realm MOL2.SGFC.COM had a ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Kerberos event logging (LogLevel registry value)
    ... LogLevel refers to Kerberos logging in the SYSTEM log, ... > appear in the Security log, once the Account> Logon events auditing category is enabled). ...
    (microsoft.public.win2000.security)