SBS - Event ID 4

George Zarif
George Zarif used Ask the Experts™
I am running a SBS 2008 and I am getting an error in the Even Viewer "Event ID 4".

Both computer names D8NBYXC1and D509DHN1does exist in the active directory and physicality.

Bellow is the Event Description and also see attachment.

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server D8NBYXC1$. The target name used was RPCSS/D509DHN1.icortechnology.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (ICORTECHNOLOGY.LOCAL) is different from the client domain (ICORTECHNOLOGY.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Is all about the Kerberos Authentication issue, check these articles out and help yourself to understand this issue:

As for your problem, try the steps out inside those links, and post back the result with log.

In addition, are you using Remote Access feature in your SBS server which enabled the RAS??

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial