what does a KDC error mean from active directory

Posted on 2008-02-01
Medium Priority
Last Modified: 2008-07-09
I was looking at the event log of the domain controller.  We are recieving the following errors:

The Security Account Manager failed a KDC request in an unexpected way. The error is in the data field. The account name was TORIS_LAPTOP$ and lookup type 0x8.

It was happening for multple computers.  What causes this error and how do I fix it?
Question by:cenetadmin

Expert Comment

ID: 20797772

This problem is related with account password.
Probably the password was set to be changed next logon but user was unable to do so.

Try reseting the password.
LVL 11

Accepted Solution

PlaceboC6 earned 750 total points
ID: 20797830
TORIS_LAPTOP$ is the hidden user account associated with the TORIS_LAPTOP computer account.  The account with a $ is the trust account that laptop has with the domain.  Often when you get errors centered arround a LAPTOP$ account,  you have a broken computer account.

You could disjoin the laptop from domain,  delete its computer account in AD,  and rejoin.

See if it clears up.
LVL 15

Assisted Solution

tntmax earned 750 total points
ID: 20797844
there are a couple of things to check:

1. netdiag /test:kerberos /v
2. DCdiag

post a copy of those logs.

If nothing shows up, you can ignore it.

You should also check out this thread here and post more information regarding the problem:


Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

LVL 11

Expert Comment

ID: 20837786
Hi cenetadmin,  have you had a chance to try any suggestions?

Author Comment

ID: 20840725
Yes, we have attempted to try your suggestions.  We found out that our hard drive is bad which is creating these problems.

Expert Comment

ID: 21964446
Good Morning, I had the same error message except for the $ on the end of the account name.  When I go into the active directory I find that this account has an X across it.  

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

601 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question