Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

event ID 4 security-kerberos what does this mean  SBS 2011 network

Posted on 2014-01-20
8
1,581 Views
Last Modified: 2014-01-29
Can anyone help me understand what this is saying?  Rob-PC exists now.  Joe-LPTP isn't on the network - joe's laptop maybe?  I searched Rob-PC's registry for joe but came up with nothing.  Both would be members of the domain, not servers themselves.

rob-pc doesn't have a mapping to a printer or share to joe-lptp either.

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server rob-pc$. The target name used was cifs/JOE-LPTP.contoso.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (contoso.LOCAL) is different from the client domain (contoso.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server
0
Comment
  • 5
  • 2
8 Comments
 
LVL 35

Assisted Solution

by:Cris Hanna
Cris Hanna earned 100 total points
ID: 39797156
Were the computers joined to the domain using the SBS wizard or the manual method?
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 400 total points
ID: 39798102
There is a decent TechNet Blog Post written about how to find the source of these messages:

http://blogs.technet.com/b/dcaro/archive/2013/07/04/fixing-the-security-kerberos-4-error.aspx

Jeff
TechSoEasy
0
 
LVL 74

Assisted Solution

by:Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy earned 400 total points
ID: 39798128
FYI, it's possible that the computer JOE-LPTP is running IIS Server or some other type of service which would cause this problem.  

This is why you don't generally want NON-Domain computers attached to your internal network.  If people bring their own devices, you can provide a separate subnet for those devices to operate on.  Most wireless access points offer some type of network segmentation to allow a "guest" network that only goes out to the Internet and doesn't interact with your company assets.

Jeff
TechSoEasy
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39816328
I'm curious -- what ended up being the issue?

Jeff
TechSoEasy
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 39816691
not sure... haven't gotten back to this
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39816960
Then why did you accept the answers?
0
 

Author Comment

by:BeGentleWithMe-INeedHelp
ID: 39817432
EE wanted me to close out the questions and I appreciate you guys taking the time to answer and help me.  I didn't think my feet dragging should hold things up or penalize your efforts. You gave me ideas so when I get back to it, I'll have a plan of attack.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39819276
I think you misunderstand.  EE does not want you to close out a question by selecting every comment made.  

You may get a reminder to stay involved in a question -- all that takes is to post a comment after the last Expert comment so that the system knows you have seen the Expert's responses.

See this article for more info:
http://support.experts-exchange.com/customer/portal/articles/755968-what-if-my-question-doesn%E2%80%99t-get-an-answer-

Jeff
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question