Solved

event ID 4 security-kerberos what does this mean  SBS 2011 network

Posted on 2014-01-20
8
1,549 Views
Last Modified: 2014-01-29
Can anyone help me understand what this is saying?  Rob-PC exists now.  Joe-LPTP isn't on the network - joe's laptop maybe?  I searched Rob-PC's registry for joe but came up with nothing.  Both would be members of the domain, not servers themselves.

rob-pc doesn't have a mapping to a printer or share to joe-lptp either.

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server rob-pc$. The target name used was cifs/JOE-LPTP.contoso.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (contoso.LOCAL) is different from the client domain (contoso.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server
0
Comment
  • 5
  • 2
8 Comments
 
LVL 35

Assisted Solution

by:Cris Hanna
Cris Hanna earned 100 total points
Comment Utility
Were the computers joined to the domain using the SBS wizard or the manual method?
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 400 total points
Comment Utility
There is a decent TechNet Blog Post written about how to find the source of these messages:

http://blogs.technet.com/b/dcaro/archive/2013/07/04/fixing-the-security-kerberos-4-error.aspx

Jeff
TechSoEasy
0
 
LVL 74

Assisted Solution

by:Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy earned 400 total points
Comment Utility
FYI, it's possible that the computer JOE-LPTP is running IIS Server or some other type of service which would cause this problem.  

This is why you don't generally want NON-Domain computers attached to your internal network.  If people bring their own devices, you can provide a separate subnet for those devices to operate on.  Most wireless access points offer some type of network segmentation to allow a "guest" network that only goes out to the Internet and doesn't interact with your company assets.

Jeff
TechSoEasy
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
Comment Utility
I'm curious -- what ended up being the issue?

Jeff
TechSoEasy
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 

Author Comment

by:BeGentleWithMe-INeedHelp
Comment Utility
not sure... haven't gotten back to this
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
Comment Utility
Then why did you accept the answers?
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
Comment Utility
EE wanted me to close out the questions and I appreciate you guys taking the time to answer and help me.  I didn't think my feet dragging should hold things up or penalize your efforts. You gave me ideas so when I get back to it, I'll have a plan of attack.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
Comment Utility
I think you misunderstand.  EE does not want you to close out a question by selecting every comment made.  

You may get a reminder to stay involved in a question -- all that takes is to post a comment after the last Expert comment so that the system knows you have seen the Expert's responses.

See this article for more info:
http://support.experts-exchange.com/customer/portal/articles/755968-what-if-my-question-doesn%E2%80%99t-get-an-answer-

Jeff
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now