Solved

kerberos errors windows xp but not on windows 2003 or windows 7

Posted on 2011-09-20
14
571 Views
Last Modified: 2012-05-12
Hi,
We have an application that runs on a server and you manage it from an app on your desktop.  Last Thursday turned on Native Mode in our Windows 2008 R2 domain and on the following Tuesday a user could not log into the app.  We reboot the server and than no one could.  We tested installing the sofware on a Windows 2003 server and Windows 7 and it worked, but if we install on a XP box it does not.

On the client the error message is "Lost connection with host machine - Source object cannot be converted to the destination type since it does not support all the required interfaces"

On the app server the error is Event ID 4625.

Thanks.
0
Comment
Question by:alacount
  • 8
  • 6
14 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Could be the software is running NTLM.
0
 

Author Comment

by:alacount
Comment Utility
Why does it work on Windows 7 and Windows 2003?  It only XP that seems to have the issue and it was working for months.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
What software? This could be a software issue not a Windows issue
0
 

Author Comment

by:alacount
Comment Utility
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Points to that all OS is supported

http://www.solimarsystems.com/SPDE_Overview.php

Have you contacted the software company for support? Do you have an older version?
0
 

Author Comment

by:alacount
Comment Utility
I'm working with the vendor but we are not making progress.  Are there any differences is how kerberos works between XP and Windows 2003 or Windows 7?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Windows 2003 and XP use the same version so there should be no difference here.

Try this

http://support.microsoft.com/kb/244474
0
Shouldn't all users have the same email signature?

You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
0
 

Author Comment

by:alacount
Comment Utility
If I do a packet capture we see the follow Kerberos errors where it is using the "Service Account" for the server name.

Kerberos request from my_pc:
KDC_REQ_BODY
Realm: Domain.COM
Server Name (NT 4.0 style name (MS specific)): ServerX

Kerberos response from DomainController:
MSG Type: KRB-ERROR (30)
error_code: KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN (7)
Server Name (NT 4.0 style name (MS specific)): ServerX
[CONNECTION RESET]
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Using NTLM. Reset the computer account
0
 

Author Comment

by:alacount
Comment Utility
Are you talking about a password reset?  We renamed the old your account and created a new one with the same name and still had the same issue.
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
Comment Utility
Reset the computer account not the password.
0
 

Author Comment

by:alacount
Comment Utility
Anything I need to be concerned about when doing this?  Do I need to re-add it to the domain?
Thanks for all your help.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Yes you will need to re-add back to the domain
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
AD Replications issues 12 37
how to get a single RSOP value via POWERSHELL 2 24
Connecting two servers 30 44
server plus 2 40
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now