• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1053
  • Last Modified:

Weird error in SBS 2008

Hi what does the below mean and how do i fix it, it pops up twice a day maybe in the system event viewer

Log Name:      System
Source:        Microsoft-Windows-Security-Kerberos
Date:          09/02/2009 11:48:54
Event ID:      4
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      CHC-SBS.chc.local
Description:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server CHC-PC16$. The target name used was RPCSS/BOARDROOM01.chc.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (CHC.LOCAL) is different from the client domain (CHC.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Kerberos" Guid="{98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1}" EventSourceName="Kerberos" />
    <EventID Qualifiers="16384">4</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-02-09T11:48:54.000Z" />
    <EventRecordID>82950</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>CHC-SBS.chc.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="Server">CHC-PC16$</Data>
    <Data Name="TargetRealm">CHC.LOCAL</Data>
    <Data Name="Targetname">RPCSS/BOARDROOM01.chc.local</Data>
    <Data Name="ClientRealm">CHC.LOCAL</Data>
    <Binary>
    </Binary>
  </EventData>
</Event>
0
nostrasystems
Asked:
nostrasystems
1 Solution
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Did you migrate this from SBS 2003?  And if so, did you remove the SBS 2003's DNS Nameserver entries BEFORE demoting SBS 2003 and removing it from the domain?

Or, do you have any manually configured IP Addresses and perhaps did not exclude those from your SBS 2008's DHCP scope?

Jeff
TechSoEasy
0
 
nostrasystemsAuthor Commented:
Or, do you have any manually configured IP Addresses and perhaps did not exclude those from your SBS 2008's DHCP scope?

i will check this asap.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now