Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Kerberos errors
Kerberos errors [message #159247] Mon, 27 July 2009 14:27 Go to next message
David Bauer  is currently offline David Bauer
Messages: 4
Registered: July 2009
Junior Member
We have a Kerberos failure issue going on on our campus. We are running
Server 2003R2 with Vista Buisness and XP prof SP3 clients in our Labs.
Pre-authentication failed:
> User Name: User [or COMPUTER$]
> User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
> Service Name: krbtgt/DOMAIN
> Pre-Authentication Type: 0x0
> Failure Code: 0x19
> Client Address: x.x.x.x

This is the error we are getting. I have searched and searched and have not
found a definite answer to these errors.

I have tried deleting and re-adding to domain, The time is correct between
server and client. I have run the accinfo.dll on client machine and cannot
find what is causing these issues.

There is a parameter that makes me think the issue is the image we used on
the labs. They were just reimaged and thats when it seemed to start, but I
banging my head against the wall trying to figure out what is causing it.
Can anyone lead me in right direction on how to filter out what is actually
causing this issue. I have used the acctinfo.dll and added the tab in AD for
additional account info, but none of those are helping me figure out what is
causing it.
Re: Kerberos errors [message #159249 is a reply to message #159247] Mon, 27 July 2009 14:41 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello David,

Please post the complete error from the event viewer. And if you have used
images make sure they are sysprepped.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We have a Kerberos failure issue going on on our campus. We are
> running
> Server 2003R2 with Vista Buisness and XP prof SP3 clients in our Labs.
> Pre-authentication failed:
>> User Name: User [or COMPUTER$]
>> User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
>> Service Name: krbtgt/DOMAIN
>> Pre-Authentication Type: 0x0
>> Failure Code: 0x19
>> Client Address: x.x.x.x
> This is the error we are getting. I have searched and searched and
> have not found a definite answer to these errors.
>
> I have tried deleting and re-adding to domain, The time is correct
> between server and client. I have run the accinfo.dll on client
> machine and cannot find what is causing these issues.
>
> There is a parameter that makes me think the issue is the image we
> used on the labs. They were just reimaged and thats when it seemed to
> start, but I banging my head against the wall trying to figure out
> what is causing it. Can anyone lead me in right direction on how to
> filter out what is actually causing this issue. I have used the
> acctinfo.dll and added the tab in AD for additional account info, but
> none of those are helping me figure out what is causing it.
>
Re: Kerberos errors [message #159280 is a reply to message #159249] Tue, 28 July 2009 05:50 Go to previous messageGo to next message
David Bauer  is currently offline David Bauer
Messages: 4
Registered: July 2009
Junior Member
The error is posted in original post(below)Here is the top with event code.
These are sysprepped images.

Pre-authentication failed:

User Name: client user name

User ID:
%{S-1-5-21-4227636001-286116198-2260668975-3108}

Service Name: krbtgt/Domain.edu

Pre-Authentication Type: 0x0

Failure Code: 0x19

Client Address: x.x.x.x

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb662b1f48cbdd22957bda1f@msnews.microsoft.com...
> Hello David,
>
> Please post the complete error from the event viewer. And if you have used
> images make sure they are sysprepped.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> We have a Kerberos failure issue going on on our campus. We are
>> running
>> Server 2003R2 with Vista Buisness and XP prof SP3 clients in our Labs.
>> Pre-authentication failed:
>>> User Name: User [or COMPUTER$]
>>> User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
>>> Service Name: krbtgt/DOMAIN
>>> Pre-Authentication Type: 0x0
>>> Failure Code: 0x19
>>> Client Address: x.x.x.x
>> This is the error we are getting. I have searched and searched and
>> have not found a definite answer to these errors.
>>
>> I have tried deleting and re-adding to domain, The time is correct
>> between server and client. I have run the accinfo.dll on client
>> machine and cannot find what is causing these issues.
>>
>> There is a parameter that makes me think the issue is the image we
>> used on the labs. They were just reimaged and thats when it seemed to
>> start, but I banging my head against the wall trying to figure out
>> what is causing it. Can anyone lead me in right direction on how to
>> filter out what is actually causing this issue. I have used the
>> acctinfo.dll and added the tab in AD for additional account info, but
>> none of those are helping me figure out what is causing it.
>>
>
>
Re: Kerberos errors [message #159282 is a reply to message #159280] Tue, 28 July 2009 05:59 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello David,

The event id No. is missing and also the source, so it is not complete.

Within 2003 and XP you can use the 2 paper button in the right down corner
to copy the copmplete event and just paste it into the posting.

Within Vista open the event and use the copy button in the left down corner.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> The error is posted in original post(below)Here is the top with event
> code. These are sysprepped images.
>
> Pre-authentication failed:
>
> User Name: client user name
>
> User ID:
> %{S-1-5-21-4227636001-286116198-2260668975-3108}
>
> Service Name: krbtgt/Domain.edu
>
> Pre-Authentication Type: 0x0
>
> Failure Code: 0x19
>
> Client Address: x.x.x.x
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb662b1f48cbdd22957bda1f@msnews.microsoft.com...
>
>> Hello David,
>>
>> Please post the complete error from the event viewer. And if you have
>> used images make sure they are sysprepped.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> We have a Kerberos failure issue going on on our campus. We are
>>> running
>>> Server 2003R2 with Vista Buisness and XP prof SP3 clients in our
>>> Labs.
>>> Pre-authentication failed:
>>>> User Name: User [or COMPUTER$]
>>>> User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
>>>> Service Name: krbtgt/DOMAIN
>>>> Pre-Authentication Type: 0x0
>>>> Failure Code: 0x19
>>>> Client Address: x.x.x.x
>>> This is the error we are getting. I have searched and searched and
>>> have not found a definite answer to these errors.
>>>
>>> I have tried deleting and re-adding to domain, The time is correct
>>> between server and client. I have run the accinfo.dll on client
>>> machine and cannot find what is causing these issues.
>>>
>>> There is a parameter that makes me think the issue is the image we
>>> used on the labs. They were just reimaged and thats when it seemed
>>> to start, but I banging my head against the wall trying to figure
>>> out what is causing it. Can anyone lead me in right direction on how
>>> to filter out what is actually causing this issue. I have used the
>>> acctinfo.dll and added the tab in AD for additional account info,
>>> but none of those are helping me figure out what is causing it.
>>>
Re: Kerberos errors [message #159308 is a reply to message #159282] Tue, 28 July 2009 09:19 Go to previous messageGo to next message
David Bauer  is currently offline David Bauer
Messages: 4
Registered: July 2009
Junior Member
These are the 2 errors I'm getting and I just confirmed they are not just
coming from the newly reimaged machine these errors are popping up on other
machines as well. These machines logon(until account lock-out threshold is
reached) , but still bring back these ticket and pre-authentication errors.

Type: Audit Failure
Date: 7/28/2009
Time: 7:33:01 AM
Event: 672
Source: Security
Category: Account Logon
User: \SYSTEM
Computer: ELIZABETH
Description:
Authentication Ticket Request:
User Name: aclab06$
Supplied Realm Name:domain.edu
User ID: -
Service Name: krbtgt/domain.edu
Service ID: -
Ticket Options: 0x40810010
Result Code: 0x6
Ticket Encryption Type: -
Pre-Authentication Type: -
Client Address: x.x.x.x
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:


Type: Audit Failure
Date: 7/28/2009
Time: 7:27:23 AM
Event: 675
Source: Security
Category: Account Logon
User: \SYSTEM
Computer: ELIZABETH
Description:
Pre-authentication failed:
User Name: lrcuser
User ID: %{S-1-5-21-4227636001-286116198-2260668975-1581}
Service Name: krbtgt/domain.edu
Pre-Authentication Type: 0x0
Failure Code: 0x19
Client Address: x.x.x.x





"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb662b2ce8cbdda2d2a52c06@msnews.microsoft.com...
> Hello David,
>
> The event id No. is missing and also the source, so it is not complete.
>
> Within 2003 and XP you can use the 2 paper button in the right down corner
> to copy the copmplete event and just paste it into the posting.
>
> Within Vista open the event and use the copy button in the left down
> corner.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> The error is posted in original post(below)Here is the top with event
>> code. These are sysprepped images.
>>
>> Pre-authentication failed:
>>
>> User Name: client user name
>>
>> User ID:
>> %{S-1-5-21-4227636001-286116198-2260668975-3108}
>>
>> Service Name: krbtgt/Domain.edu
>>
>> Pre-Authentication Type: 0x0
>>
>> Failure Code: 0x19
>>
>> Client Address: x.x.x.x
>>
>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>> news:ff16fb662b1f48cbdd22957bda1f@msnews.microsoft.com...
>>
>>> Hello David,
>>>
>>> Please post the complete error from the event viewer. And if you have
>>> used images make sure they are sysprepped.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> We have a Kerberos failure issue going on on our campus. We are
>>>> running
>>>> Server 2003R2 with Vista Buisness and XP prof SP3 clients in our
>>>> Labs.
>>>> Pre-authentication failed:
>>>>> User Name: User [or COMPUTER$]
>>>>> User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
>>>>> Service Name: krbtgt/DOMAIN
>>>>> Pre-Authentication Type: 0x0
>>>>> Failure Code: 0x19
>>>>> Client Address: x.x.x.x
>>>> This is the error we are getting. I have searched and searched and
>>>> have not found a definite answer to these errors.
>>>>
>>>> I have tried deleting and re-adding to domain, The time is correct
>>>> between server and client. I have run the accinfo.dll on client
>>>> machine and cannot find what is causing these issues.
>>>>
>>>> There is a parameter that makes me think the issue is the image we
>>>> used on the labs. They were just reimaged and thats when it seemed
>>>> to start, but I banging my head against the wall trying to figure
>>>> out what is causing it. Can anyone lead me in right direction on how
>>>> to filter out what is actually causing this issue. I have used the
>>>> acctinfo.dll and added the tab in AD for additional account info,
>>>> but none of those are helping me figure out what is causing it.
>>>>
>
>
Re: Kerberos errors [message #159310 is a reply to message #159308] Tue, 28 July 2009 09:28 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello David,

You talk about imaged machines, are your images prepared with sysprep?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> These are the 2 errors I'm getting and I just confirmed they are not
> just coming from the newly reimaged machine these errors are popping
> up on other machines as well. These machines logon(until account
> lock-out threshold is reached) , but still bring back these ticket and
> pre-authentication errors.
>
> Type: Audit Failure
> Date: 7/28/2009
> Time: 7:33:01 AM
> Event: 672
> Source: Security
> Category: Account Logon
> User: \SYSTEM
> Computer: ELIZABETH
> Description:
> Authentication Ticket Request:
> User Name: aclab06$
> Supplied Realm Name:domain.edu
> User ID: -
> Service Name: krbtgt/domain.edu
> Service ID: -
> Ticket Options: 0x40810010
> Result Code: 0x6
> Ticket Encryption Type: -
> Pre-Authentication Type: -
> Client Address: x.x.x.x
> Certificate Issuer Name:
> Certificate Serial Number:
> Certificate Thumbprint:
> Type: Audit Failure
> Date: 7/28/2009
> Time: 7:27:23 AM
> Event: 675
> Source: Security
> Category: Account Logon
> User: \SYSTEM
> Computer: ELIZABETH
> Description:
> Pre-authentication failed:
> User Name: lrcuser
> User ID: %{S-1-5-21-4227636001-286116198-2260668975-1581}
> Service Name: krbtgt/domain.edu
> Pre-Authentication Type: 0x0
> Failure Code: 0x19
> Client Address: x.x.x.x
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb662b2ce8cbdda2d2a52c06@msnews.microsoft.com...
>
>> Hello David,
>>
>> The event id No. is missing and also the source, so it is not
>> complete.
>>
>> Within 2003 and XP you can use the 2 paper button in the right down
>> corner to copy the copmplete event and just paste it into the
>> posting.
>>
>> Within Vista open the event and use the copy button in the left down
>> corner.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> The error is posted in original post(below)Here is the top with
>>> event code. These are sysprepped images.
>>>
>>> Pre-authentication failed:
>>>
>>> User Name: client user name
>>>
>>> User ID:
>>> %{S-1-5-21-4227636001-286116198-2260668975-3108}
>>> Service Name: krbtgt/Domain.edu
>>>
>>> Pre-Authentication Type: 0x0
>>>
>>> Failure Code: 0x19
>>>
>>> Client Address: x.x.x.x
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>>> news:ff16fb662b1f48cbdd22957bda1f@msnews.microsoft.com...
>>>
>>>> Hello David,
>>>>
>>>> Please post the complete error from the event viewer. And if you
>>>> have used images make sure they are sysprepped.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> We have a Kerberos failure issue going on on our campus. We are
>>>>> running
>>>>> Server 2003R2 with Vista Buisness and XP prof SP3 clients in our
>>>>> Labs.
>>>>> Pre-authentication failed:
>>>>>> User Name: User [or COMPUTER$]
>>>>>> User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
>>>>>> Service Name: krbtgt/DOMAIN
>>>>>> Pre-Authentication Type: 0x0
>>>>>> Failure Code: 0x19
>>>>>> Client Address: x.x.x.x
>>>>> This is the error we are getting. I have searched and searched and
>>>>> have not found a definite answer to these errors.
>>>>>
>>>>> I have tried deleting and re-adding to domain, The time is correct
>>>>> between server and client. I have run the accinfo.dll on client
>>>>> machine and cannot find what is causing these issues.
>>>>>
>>>>> There is a parameter that makes me think the issue is the image we
>>>>> used on the labs. They were just reimaged and thats when it seemed
>>>>> to start, but I banging my head against the wall trying to figure
>>>>> out what is causing it. Can anyone lead me in right direction on
>>>>> how to filter out what is actually causing this issue. I have used
>>>>> the acctinfo.dll and added the tab in AD for additional account
>>>>> info, but none of those are helping me figure out what is causing
>>>>> it.
>>>>>
Re: Kerberos errors [message #159318 is a reply to message #159310] Tue, 28 July 2009 11:53 Go to previous message
David Bauer  is currently offline David Bauer
Messages: 4
Registered: July 2009
Junior Member
Yes they are sysprepped and It is not just newly imaged machine it is other
on cmapus as well. There is no pattern to the machine it is affecting.
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb662b3418cbddbfe578f106@msnews.microsoft.com...
> Hello David,
>
> You talk about imaged machines, are your images prepared with sysprep?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> These are the 2 errors I'm getting and I just confirmed they are not
>> just coming from the newly reimaged machine these errors are popping
>> up on other machines as well. These machines logon(until account
>> lock-out threshold is reached) , but still bring back these ticket and
>> pre-authentication errors.
>>
>> Type: Audit Failure
>> Date: 7/28/2009
>> Time: 7:33:01 AM
>> Event: 672
>> Source: Security
>> Category: Account Logon
>> User: \SYSTEM
>> Computer: ELIZABETH
>> Description:
>> Authentication Ticket Request:
>> User Name: aclab06$
>> Supplied Realm Name:domain.edu
>> User ID: -
>> Service Name: krbtgt/domain.edu
>> Service ID: -
>> Ticket Options: 0x40810010
>> Result Code: 0x6
>> Ticket Encryption Type: -
>> Pre-Authentication Type: -
>> Client Address: x.x.x.x
>> Certificate Issuer Name:
>> Certificate Serial Number:
>> Certificate Thumbprint:
>> Type: Audit Failure
>> Date: 7/28/2009
>> Time: 7:27:23 AM
>> Event: 675
>> Source: Security
>> Category: Account Logon
>> User: \SYSTEM
>> Computer: ELIZABETH
>> Description:
>> Pre-authentication failed:
>> User Name: lrcuser
>> User ID: %{S-1-5-21-4227636001-286116198-2260668975-1581}
>> Service Name: krbtgt/domain.edu
>> Pre-Authentication Type: 0x0
>> Failure Code: 0x19
>> Client Address: x.x.x.x
>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>> news:ff16fb662b2ce8cbdda2d2a52c06@msnews.microsoft.com...
>>
>>> Hello David,
>>>
>>> The event id No. is missing and also the source, so it is not
>>> complete.
>>>
>>> Within 2003 and XP you can use the 2 paper button in the right down
>>> corner to copy the copmplete event and just paste it into the
>>> posting.
>>>
>>> Within Vista open the event and use the copy button in the left down
>>> corner.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> The error is posted in original post(below)Here is the top with
>>>> event code. These are sysprepped images.
>>>>
>>>> Pre-authentication failed:
>>>>
>>>> User Name: client user name
>>>>
>>>> User ID:
>>>> %{S-1-5-21-4227636001-286116198-2260668975-3108}
>>>> Service Name: krbtgt/Domain.edu
>>>>
>>>> Pre-Authentication Type: 0x0
>>>>
>>>> Failure Code: 0x19
>>>>
>>>> Client Address: x.x.x.x
>>>>
>>>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>>>> news:ff16fb662b1f48cbdd22957bda1f@msnews.microsoft.com...
>>>>
>>>>> Hello David,
>>>>>
>>>>> Please post the complete error from the event viewer. And if you
>>>>> have used images make sure they are sysprepped.
>>>>>
>>>>> Best regards
>>>>>
>>>>> Meinolf Weber
>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>> and
>>>>> confers no rights.
>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>> We have a Kerberos failure issue going on on our campus. We are
>>>>>> running
>>>>>> Server 2003R2 with Vista Buisness and XP prof SP3 clients in our
>>>>>> Labs.
>>>>>> Pre-authentication failed:
>>>>>>> User Name: User [or COMPUTER$]
>>>>>>> User ID: DOMAIN\User [or DOMAIN\COMPUTER$]
>>>>>>> Service Name: krbtgt/DOMAIN
>>>>>>> Pre-Authentication Type: 0x0
>>>>>>> Failure Code: 0x19
>>>>>>> Client Address: x.x.x.x
>>>>>> This is the error we are getting. I have searched and searched and
>>>>>> have not found a definite answer to these errors.
>>>>>>
>>>>>> I have tried deleting and re-adding to domain, The time is correct
>>>>>> between server and client. I have run the accinfo.dll on client
>>>>>> machine and cannot find what is causing these issues.
>>>>>>
>>>>>> There is a parameter that makes me think the issue is the image we
>>>>>> used on the labs. They were just reimaged and thats when it seemed
>>>>>> to start, but I banging my head against the wall trying to figure
>>>>>> out what is causing it. Can anyone lead me in right direction on
>>>>>> how to filter out what is actually causing this issue. I have used
>>>>>> the acctinfo.dll and added the tab in AD for additional account
>>>>>> info, but none of those are helping me figure out what is causing
>>>>>> it.
>>>>>>
>
>
Previous Topic:Domain Join Fails errorMessage: 00000070: SysErr: DSID-031A0F5F,
Next Topic:Error encountered when installing gpmc.msi
Goto Forum:
  


Current Time: Tue Jan 16 04:20:58 MST 2018

Total time taken to generate the page: 0.04178 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software