Link to home
Start Free TrialLog in
Avatar of fekdep
fekdepFlag for Canada

asked on

Phantom netbios name. Ping two computers, get same IP.

I'm getting this error every hour: (The names have been changed)

 The kerberos client received a KRB_AP_ERR_MODIFIED error from the server COMP0001$. The target name used was cifs/ACCTNG-USER1.cdl.local. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator.  |  Event: 4  |  EventLog: system

When I ping COMP0001, 192.....117 responds.  When I ping ACCTNG-USER1, the same IP responds.  The computer ACCTNG-USER1 isn't on, and hasn't been for some time.

I've rejoined COMP0001 to the domain with a new name.  I've killed off all references in the DNS to USER1, I've tombstoned USER1 in the WINS and I've deleted the arp record and restarted the server.  There is no hosts of lmhosts file.

Where is the server getting its information? How can it be that when I ping both of these names, the same IP responds?
ASKER CERTIFIED SOLUTION
Avatar of jmluc123
jmluc123

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of CptnTrips
CptnTrips

Do you have more than one domain?
https://www.experts-exchange.com/questions/22818034/The-kerberos-client-received-a-KRB-AP-ERR-MODIFIED-error-from-the-server-host-prnsrv-student-k12-mo-us-This-indicates-that-the-password-used-to-encrypt-the-kerberos-service-ticket-is-different-than.html

http://support.microsoft.com/kb/558115

From http://www.petri.co.il/forums/showthread.php?t=10487 -
OK SO HERE IS THE SOLOUTION for kerberos error id : 4

on the file server- log on locally with administrator and change the computer account SID (of the file server), it's IP and COMPUTERNAME.

u can use sysprep but u can also use a free product from www.sysinternals.com called "new sid" http://www.sysinternals.com/utilities/newsid.html

I hope it can help other ppl who stucks with it,
cause i didnt find a written soloution on the web.
Avatar of fekdep

ASKER

Are you suggesting that I change the name and IP of my server?
No. I'm suggesting you substitute the word server for workstation. You have renamed the machine and given it a new IP. Have you tried changing it's SID?