Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Event ID 4 Source Kerberos

Posted on 2008-10-08
3
982 Views
Last Modified: 2012-08-13
Hi,
A Vista PC on a SBS2003 domain has started to cause a major problem. It started with Vista not being able to browse the shared resources of a WinXP PC on the same domain (after many months of everything working fine). The shared printer attached to the WinXP PC became inaccessible to the Vista PC. At the same time I started to notice Event ID 4 Source Kerberos errors appear in both the SBS2003 and the Vista event logs - error as follows:

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server [vistaPC]$. The target name used was cifs/WinxpPC.domain.local. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator.

Something very strange now occurs. When I ping the winxpPC by name from the vistaPC, it resolves to the IP address of itself. (i.e. the vistaPC ip is 192.168.16.21, the winxpPC ip is 192.168.16.22. When I ping winxpPC from vistaPC it resolves to 192.168.16.21).

Any ideas?

Thanks
0
Comment
Question by:cyansol
3 Comments
 
LVL 22

Expert Comment

by:Olaf De Ceuster
ID: 22674356
Please run the following lines one by one on the Vista machine.
net stop netlogon
ipconfig/flushdns
ipconfig/registerdns
ipconfig/release
Restart the workstation .
If that did not work please post ipconfig/all of Server, Vista and XP machines in question.
Hope that helps,
Olaf
0
 
LVL 6

Accepted Solution

by:
Hardeep_Saluja earned 500 total points
ID: 22674363
Hi cyansol..

You need to reset secure channel on your server

Download Windows 2003 resource Kit from www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd

Go to resource kit folder>
run commnad:
"klist purge"  >> This would purge all your kerberos tickets

Now, reset secure channel of DC:
netdom resetpwd /server:<server_name> /userd:<domain_name\administrator> /passwordd:>administrator_password>

As you have only 1 DC SBS, we can follow the above process.
Note: Incase, we have multiple DC's, we need to stop kerberos service on all the other DC's except the 1 on which we are running the commands so that DC should get a fresh kerb ticket.
Please let me know if any queries.
Hardeep Saluja
As
0
 

Author Comment

by:cyansol
ID: 22676666
Thanks for the advice guys.

Olaf, I tried running the commands you mentioned yesterday before posting the question, but unfortunately had no joy.

Hardeep, your solution did the trick, and the the PC's are now running as expected. One other thing I did after applying your solution was to delete the IP leases in DHCP on the SBS before restarting both PC's.

Thank you both for your assistance.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many reasons a PC runs slower than when it was new, ranging from malicious software intended to mess things up to simple general Windows use.  Your PC performance may slowly degrade over time without you noticing but when you buy a PC from…
The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question