SBS Server 2003 KDC error

Hi all

I have a SBS 2003 box that is also my exchange server. I keep getting event id 7 KDC errors which states the security account manager failed and it gives the account name. I have done some research online but didn't find anything.

One interesting thing about this is that the map drive script has the following line at the end of the script-
w32tm /config /manualpeerlist:ntp3.sf-bay.org /syncfromflags:manual
w32tm /register
w32tm /resync /nowait

My question is should I have these lines at the beginning of the script (time syn issue) and would that eliminate the KDC error? If not what should I do to eliminate the KDC error

Your help is greatly appreciate.

Thank you
dylanitesAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

PlaceboC6Commented:
Can you post one of the errors?

If it is displaying an account like:   account$  this is usually referencing the trust account between a computer account and the domain.  The trust account for a computer account is actually a hidden user account and the password between the computer and domain is stored in this.

You might need to delete the computer account on one of these and then disjoin/rejoin the workstation as a test and see if it clears up.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jay_Jay70Commented:
i dont know why you would have those lines in your script...the time service doesnt really need it...as long as it looks at external once and your clients look at it, then it should be fine...you might find your time difference is more than 5 mins and throwing out kerberos...i would remove those lines temporarily and test, and i would also rejoin the machine in question
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.