We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

Weird error in SBS 2008

nostrasystems
on
Medium Priority
1,060 Views
Last Modified: 2012-05-06
Hi what does the below mean and how do i fix it, it pops up twice a day maybe in the system event viewer

Log Name:      System
Source:        Microsoft-Windows-Security-Kerberos
Date:          09/02/2009 11:48:54
Event ID:      4
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      CHC-SBS.chc.local
Description:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server CHC-PC16$. The target name used was RPCSS/BOARDROOM01.chc.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (CHC.LOCAL) is different from the client domain (CHC.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Kerberos" Guid="{98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1}" EventSourceName="Kerberos" />
    <EventID Qualifiers="16384">4</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-02-09T11:48:54.000Z" />
    <EventRecordID>82950</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>CHC-SBS.chc.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="Server">CHC-PC16$</Data>
    <Data Name="TargetRealm">CHC.LOCAL</Data>
    <Data Name="Targetname">RPCSS/BOARDROOM01.chc.local</Data>
    <Data Name="ClientRealm">CHC.LOCAL</Data>
    <Binary>
    </Binary>
  </EventData>
</Event>
Comment
Watch Question

Principal Consultant
CERTIFIED EXPERT
Most Valuable Expert 2016
Top Expert 2014
Commented:
Did you migrate this from SBS 2003?  And if so, did you remove the SBS 2003's DNS Nameserver entries BEFORE demoting SBS 2003 and removing it from the domain?

Or, do you have any manually configured IP Addresses and perhaps did not exclude those from your SBS 2008's DHCP scope?

Jeff
TechSoEasy

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
Or, do you have any manually configured IP Addresses and perhaps did not exclude those from your SBS 2008's DHCP scope?

i will check this asap.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.