Announcement

Collapse
No announcement yet.

[win2k3] Kerberos Key Distribution Center service is set to disabled

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • [win2k3] Kerberos Key Distribution Center service is set to disabled

    Hello,

    I am a new admin for a small company with 300 Citrix users.
    My predecessor has installed the Citrix servers. Now there are errors
    in the eventlog stating: The kerberos subsystem encountered a PAC verification failure.

    I think this is because the Kerberos Key Distribution Center service is set to disabled.

    Citrix support says that this service has to be started for the servers that give an error: http://support.citrix.com/article/ctx105953

    Can it do harm to leave that service disabled? And what harm can it do?

  • #2
    Re: [win2k3] Kerberos Key Distribution Center service is set to disabled

    As far as I am aware, in a Windows Domain, the DC should be the only servers that have the KDC enabled. That grants users the appropriate ticket for accessing resources on the network. So, therefore, if the KDC is not on a DC, I would say it is ok to remain disabled.

    However, I have never used Citrix.
    Last edited by Virtual; 23rd February 2009, 18:48.

    Comment


    • #3
      Re: [win2k3] Kerberos Key Distribution Center service is set to disabled

      I think the KDC service is required during the interactive logon process.
      Have you followed the advice from this link in there?: http://support.microsoft.com/default...b;en-us;883268

      Ta
      Caesar's cipher - 3

      ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

      SFX JNRS FC U6 MNGR

      Comment


      • #4
        Re: [win2k3] Kerberos Key Distribution Center service is set to disabled

        Originally posted by L4ndy View Post
        I think the KDC service is required during the interactive logon process.
        Have you followed the advice from this link in there?: http://support.microsoft.com/default...b;en-us;883268

        Ta
        I am experiencing long log-on times, so I guess this has to do with the KDC service.

        Comment

        Working...
        X