<div>
I've seen this and the SPN names are different on the various computers. <br />
<br />
The only other thing I can think of is before I got here they were ghosting computers with out syspreping them so there may be some duplicate SIDs out there (just found that out this morning)<br />
<br />
I'm going to try newsid on a few of the computers to see if it reduces the number of errors.<br />
<br />
eb
</div>


<div>
<div class="content wysiwyg-content">
I am getting lots of kerberos errors on a few of my servers;<br />
<br />
Event Type: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Error<br />
Event Source: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Kerberos<br />
Event Category: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;None<br />
Event ID: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;4<br />
Date: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;7/23/2008<br />
Time: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;10:59:14 PM<br />
User: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;N/A<br />
Computer: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NANGARHAR<br />
Description:<br />
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server DAIL06088$. &nbsp;The target name used was cifs/DAIL07028.daiglobal.n<wbr />et. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named &nbsp;machine accounts in the target realm (DAIGLOBAL.NET), and the client realm. &nbsp; Please contact your system administrator.<br />
<br />
For more information, see Help and Support Center at <a href="http://go.microsoft.com/fwlink/events.asp" rel="ugc">http://go.microsoft.com/fwlink/events.asp</a>.<br />
<br />
<br />
This happens over and over and the computer names change in almost every event message. &nbsp;
</div>
</div>


I am getting lots of kerberos errors on a few of my servers;

Event Type:	Error
Event Source:	Kerberos
Event Category:	None
Event ID:	4
Date:		7/23/2008
Time:		10:59:14 PM
User:		N/A
Computer:	NANGARHAR
Description:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server DAIL06088$.  The target name used was cifs/DAIL07028.daiglobal.net. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named  machine accounts in the target realm (DAIGLOBAL.NET), and the client realm.   Please contact your system administrator.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


This happens over and over and the computer names change in almost every event message.  

Many Kerberos Event ID 4 errors on multiple servers

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

The Windows operating systems have distinct methodologies for designing and implementing networks, and have specific systems to accomplish various networking processes, such as Exchange for email, Sharepoint for shared files and programs, and IIS for delivery of web pages. Microsoft also produces server technologies for networked database use, security and virtualization.