Announcement

Collapse
No announcement yet.

Windows event id 4

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Windows event id 4

    We have observed Kerberos event id4 on one member server (Print server )BRAPRINT001 (10.1.37.167). Please find the description below about the event id. Can some one please help me on it ?

    Event Type: Error
    Event Source: Kerberos
    Event Category: None
    Event ID: 4
    Date: 1/13/2010
    Time: 6:16:35 PM
    User: N/A
    Computer: BRAPRINT001
    Description:
    The kerberos client received a KRB_AP_ERR_MODIFIED error from the server SLH-001155$. The target name used was cifs/ATL017784.dir.ucb-group.com. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DIR.UCB-GROUP.COM), and the client realm. Please contact your system administrator.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    ATL017784.dir.ucb-group.com [10.70.11.107]

    We captured network for it. Can you please help here what is going on?


    captured file is available at http: //www dot megaupload dot com/?d=WDIG1CAT
    Last edited by biggles77; 24th January 2010, 17:21. Reason: Disable link

  • #2
    Re: Windows event id 4

    While the disabled link is quite possibly genuine, I would suggest EXTREME care be taken if you are going to visit it. Hence my reason for disabling it from being a live link.

    rrcrajesh2003, I suggest you find some method of saving your captured file to an acceptable format and then uploading it to this thread. As I said the link may lead to a perfectly harmless location that is festooned with information from your capture but there is no way we have of knowing this from that link. I receive dozens of links like this every day promising me an appendage the size of the Empire State Building with one simple click.

    Please do not take offence from my caution over your link as none is intended.
    1 1 was a racehorse.
    2 2 was 1 2.
    1 1 1 1 race 1 day,
    2 2 1 1 2

    Comment


    • #3
      Re: Windows event id 4

      Maybe a dublicate SID or DNS misconfig? or a quick Google search might give you more ideas what other people have done to get it fixed. No need for Capture file IMO.
      See if this helps: http://msmvps.com/blogs/vandooren/ar...ied-error.aspx
      Last edited by L4ndy; 25th January 2010, 14:27.
      Caesar's cipher - 3

      ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

      SFX JNRS FC U6 MNGR

      Comment

      Working...
      X