Re: Kerberos errors

Tech-Archive recommends: Fix windows errors by optimizing your registry

These are the 2 errors I'm getting and I just confirmed they are not just coming from the newly reimaged machine these errors are popping up on other machines as well. These machines logon(until account lock-out threshold is reached) , but still bring back these ticket and pre-authentication errors.

Type: Audit Failure
Date: 7/28/2009
Time: 7:33:01 AM
Event: 672
Source: Security
Category: Account Logon
User: \SYSTEM
Computer: ELIZABETH
Description:
Authentication Ticket Request:
User Name: aclab06$
Supplied Realm Name:domain.edu
User ID: -
Service Name: krbtgt/domain.edu
Service ID: -
Ticket Options: 0x40810010
Result Code: 0x6
Ticket Encryption Type: -
Pre-Authentication Type: -
Client Address: x.x.x.x
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:


Type: Audit Failure
Date: 7/28/2009
Time: 7:27:23 AM
Event: 675
Source: Security
Category: Account Logon
User: \SYSTEM
Computer: ELIZABETH
Description:
Pre-authentication failed:
User Name: lrcuser
User ID: %{S-1-5-21-4227636001-286116198-2260668975-1581}
Service Name: krbtgt/domain.edu
Pre-Authentication Type: 0x0
Failure Code: 0x19
Client Address: x.x.x.x





"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb662b2ce8cbdda2d2a52c06@xxxxxxxxxxxxxxxxxxxxxxx
Hello David,

The event id No. is missing and also the source, so it is not complete.

Within 2003 and XP you can use the 2 paper button in the right down corner to copy the copmplete event and just paste it into the posting.

Within Vista open the event and use the copy button in the left down corner.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

The error is posted in original post(below)Here is the top with event
code. These are sysprepped images.

Pre-authentication failed:

User Name: client user name

User ID:
%{S-1-5-21-4227636001-286116198-2260668975-3108}

Service Name: krbtgt/Domain.edu

Pre-Authentication Type: 0x0

Failure Code: 0x19

Client Address: x.x.x.x

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb662b1f48cbdd22957bda1f@xxxxxxxxxxxxxxxxxxxxxxx

Hello David,

Please post the complete error from the event viewer. And if you have
used images make sure they are sysprepped.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
We have a Kerberos failure issue going on on our campus. We are
running
Server 2003R2 with Vista Buisness and XP prof SP3 clients in our
Labs.
Pre-authentication failed:
User Name: User [or COMPUTER$]
User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
Service Name: krbtgt/DOMAIN
Pre-Authentication Type: 0x0
Failure Code: 0x19
Client Address: x.x.x.x
This is the error we are getting. I have searched and searched and
have not found a definite answer to these errors.

I have tried deleting and re-adding to domain, The time is correct
between server and client. I have run the accinfo.dll on client
machine and cannot find what is causing these issues.

There is a parameter that makes me think the issue is the image we
used on the labs. They were just reimaged and thats when it seemed
to start, but I banging my head against the wall trying to figure
out what is causing it. Can anyone lead me in right direction on how
to filter out what is actually causing this issue. I have used the
acctinfo.dll and added the tab in AD for additional account info,
but none of those are helping me figure out what is causing it.




.

Quantcast