+ Post New Thread
Results 1 to 3 of 3
Windows Thread, Group Policy / Kerberos problem in Technical; Got a weird problem which only appears (AFAIK) on Viglen PCs with blue mesh panels along the bottom of the ...
  1. #1
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Group Policy / Kerberos problem

    Got a weird problem which only appears (AFAIK) on Viglen PCs with blue mesh panels along the bottom of the base unit. They are ASUS motherboards with SIS900 NICs.

    Occasionally (and only on some of the machines), the Group Policy fails. The following even appears in the System log (source Kerberos, event 7)

    The kerberos subsystem encountered a PAC verification failure. This indicates that the PAC from the client ICTSUITE-04$ in realm SJB-CURRIC.INT had a PAC which failed to verify or was modified. Contact your system administrator.
    I have enabled verbose USERENV debug logging and the only clue in the resulting file are lines which say

    USERENV(1a4.488) 15:56:46:156 ProcessGPO: Machine does not have access to the GPO and so will not be applied.
    I have searched high and low for a solution to this. There are a number of suggestions which relate to Kerberos problems, but none which really relate to my exact circumstances. There is an entry on Experts Exchange in their Hot Solutions section, but only registered members can view the solution.

    It's a vanilla 2K3 domain so the school does not have a software support contract with Viglen.

    Any ideas?

  2. #2
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Group Policy / Kerberos problem

    Fixed by removing the Viglen supplied 2.x.y.z driver. The 1.x.y.z driver supplied with XP SP2 worked fine and no more errors. I did try the 2.x.y.z+1 driver available on SIS website but no better.

    Also, although the PC produced multiple W32TIME errors at boot, the Kerberos error only appeared when Sophos was added to the mix (I built 7 PCs with all possible combinations of Sophos, Windows Updates, Polcies and Software to test this).

  3. #3

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,399
    Thank Post
    1,516
    Thanked 1,056 Times in 925 Posts
    Rep Power
    303

    Re: Group Policy / Kerberos problem

    My advice, steer clear of SIS chipsetted boards full stop, they are not nice, I have had too many issues with them to carry on trying them out. I use Via or Intel based ones only.

SHARE:
+ Post New Thread

Similar Threads

  1. server Group Policy editor Problem
    By DaveP in forum Windows
    Replies: 3
    Last Post: 13th December 2007, 09:17 PM
  2. Replies: 20
    Last Post: 12th November 2007, 04:55 PM
  3. Replies: 22
    Last Post: 6th July 2007, 08:56 AM
  4. Group Policy
    By jman167 in forum Windows
    Replies: 1
    Last Post: 28th June 2007, 10:27 PM
  5. Group Policy
    By faza in forum Wireless Networks
    Replies: 27
    Last Post: 5th July 2006, 06:34 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •