Solved

event ID 4 security-kerberos what does this mean  SBS 2011 network

Posted on 2014-01-20
8
1,561 Views
Last Modified: 2014-01-29
Can anyone help me understand what this is saying?  Rob-PC exists now.  Joe-LPTP isn't on the network - joe's laptop maybe?  I searched Rob-PC's registry for joe but came up with nothing.  Both would be members of the domain, not servers themselves.

rob-pc doesn't have a mapping to a printer or share to joe-lptp either.

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server rob-pc$. The target name used was cifs/JOE-LPTP.contoso.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (contoso.LOCAL) is different from the client domain (contoso.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server
0
Comment
  • 5
  • 2
8 Comments
 
LVL 35

Assisted Solution

by:Cris Hanna
Cris Hanna earned 100 total points
ID: 39797156
Were the computers joined to the domain using the SBS wizard or the manual method?
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 400 total points
ID: 39798102
There is a decent TechNet Blog Post written about how to find the source of these messages:

http://blogs.technet.com/b/dcaro/archive/2013/07/04/fixing-the-security-kerberos-4-error.aspx

Jeff
TechSoEasy
0
 
LVL 74

Assisted Solution

by:Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy earned 400 total points
ID: 39798128
FYI, it's possible that the computer JOE-LPTP is running IIS Server or some other type of service which would cause this problem.  

This is why you don't generally want NON-Domain computers attached to your internal network.  If people bring their own devices, you can provide a separate subnet for those devices to operate on.  Most wireless access points offer some type of network segmentation to allow a "guest" network that only goes out to the Internet and doesn't interact with your company assets.

Jeff
TechSoEasy
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39816328
I'm curious -- what ended up being the issue?

Jeff
TechSoEasy
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 39816691
not sure... haven't gotten back to this
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39816960
Then why did you accept the answers?
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 39817432
EE wanted me to close out the questions and I appreciate you guys taking the time to answer and help me.  I didn't think my feet dragging should hold things up or penalize your efforts. You gave me ideas so when I get back to it, I'll have a plan of attack.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39819276
I think you misunderstand.  EE does not want you to close out a question by selecting every comment made.  

You may get a reminder to stay involved in a question -- all that takes is to post a comment after the last Expert comment so that the system knows you have seen the Expert's responses.

See this article for more info:
http://support.experts-exchange.com/customer/portal/articles/755968-what-if-my-question-doesn%E2%80%99t-get-an-answer-

Jeff
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now