Phantom netbios name.  Ping two computers, get same IP.

fekdep
fekdep used Ask the Experts™
on
I'm getting this error every hour: (The names have been changed)

 The kerberos client received a KRB_AP_ERR_MODIFIED error from the server COMP0001$. The target name used was cifs/ACCTNG-USER1.cdl.local. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator.  |  Event: 4  |  EventLog: system

When I ping COMP0001, 192.....117 responds.  When I ping ACCTNG-USER1, the same IP responds.  The computer ACCTNG-USER1 isn't on, and hasn't been for some time.

I've rejoined COMP0001 to the domain with a new name.  I've killed off all references in the DNS to USER1, I've tombstoned USER1 in the WINS and I've deleted the arp record and restarted the server.  There is no hosts of lmhosts file.

Where is the server getting its information? How can it be that when I ping both of these names, the same IP responds?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
after dns has fully replicated execute from ipconfig /flushdns and ipconfig /registerdns from a command prompt.  
Do you have more than one domain?
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22818034.html

http://support.microsoft.com/kb/558115

From http://www.petri.co.il/forums/showthread.php?t=10487 -
OK SO HERE IS THE SOLOUTION for kerberos error id : 4

on the file server- log on locally with administrator and change the computer account SID (of the file server), it's IP and COMPUTERNAME.

u can use sysprep but u can also use a free product from www.sysinternals.com called "new sid" http://www.sysinternals.com/utilities/newsid.html

I hope it can help other ppl who stucks with it,
cause i didnt find a written soloution on the web.

Author

Commented:
Are you suggesting that I change the name and IP of my server?
No. I'm suggesting you substitute the word server for workstation. You have renamed the machine and given it a new IP. Have you tried changing it's SID?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial