+ Post New Thread
Results 1 to 15 of 15
Windows Thread, Help please - strange error messages on W2k3 server in Technical; We recently had a power cut which shut down the entire campus, all servers were powered down via UPS. When ...
  1. #1

    Join Date
    Dec 2005
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Help please - strange error messages on W2k3 server

    We recently had a power cut which shut down the entire campus, all servers were powered down via UPS.

    When the power was restored I restarted the DC's and everything appears to be working fine BUT I am getting lots of the following error messages on my PDC.

    The kerberos client received a KRB_AP_ERR_MODIFIED error from the server SCI-ICT-14$. The target name used was cifs/GRAPHICS8A.cowplain.hants.sch.uk. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (COWPLAIN.HANTS.SCH.UK), and the client realm. Please contact your system administrator.

    As I said above everything seems to be working fine on the network but I don't like having all of these error messages.

    Any ideas?

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Help please - strange error messages on W2k3 server

    Are the machines installed from images?

  3. #3

    Join Date
    Dec 2005
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Help please - strange error messages on W2k3 server

    Yes, all machines are loaded using Norton Ghost

  4. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Help please - strange error messages on W2k3 server

    And did you sysprep them afterwards?

  5. #5

    Join Date
    Dec 2005
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Help please - strange error messages on W2k3 server

    Yes, we haven't imaged any of the pcs since the summer break though

  6. #6

    Join Date
    Oct 2006
    Location
    North Yorkshire
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Help please - strange error messages on W2k3 server

    A few pointers (possibly). Check that the clocks on the clients are synchronised properly with the DCs and that the servers themselves are all showing the same time. You could also try renewing all the DHCP leases and also perform a manual scavenge of DNS addresses. You might equally find that this settles down after a day or two by itself - these tetchy servers really don't appreciate being distured in their work!

  7. #7

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,447
    Thank Post
    1,537
    Thanked 1,069 Times in 934 Posts
    Rep Power
    305

    Re: Help please - strange error messages on W2k3 server

    I have this ocasionally, the machines in my case have never been imaged in there entire life, but threw a wobbly, I just removed them both from the domain, deleted the accounts and put them back on again and then they stopped moaning so all was good, but when it was doing the moaning, I didnt notice any issues with the clients, they seemed all good and fine.

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Help please - strange error messages on W2k3 server

    running netdiag on one of the affected clients might also yield clues.

  9. #9

    Join Date
    Dec 2005
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Help please - strange error messages on W2k3 server

    Thanks I will give that a try when I get a moment, open evening tonight aaargh!

  10. #10

    Join Date
    Oct 2005
    Location
    mnah mnah!
    Posts
    1,126
    Thank Post
    275
    Thanked 227 Times in 173 Posts
    Rep Power
    113

    Re: Help please - strange error messages on W2k3 server

    Quote Originally Posted by Cowman
    Thanks I will give that a try when I get a moment, open evening tonight aaargh!
    Nothing in the client event logs on one of the 'named' workstations?

  11. #11

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    786
    Thank Post
    1
    Thanked 34 Times in 32 Posts
    Rep Power
    24

    Re: Help please - strange error messages on W2k3 server

    Explanation of the Error
    ========================
    This event will occur if you present a service ticket to a principal (target
    computer) which cannot decrypt it. Normally the service ticket is encrypted using the shared secret of the machine account's password as a basis for the encryption used to encrypt the service ticket. The password is known only to the KDC (Domain controllers) and the target machine. The client presents encrypted session ticket it received from the KDC to the target server. If the server can decrypt the ticket, the server then knows that it was encrypted by a trusted source (the DC) and the presenter (the client) is also trusted. If the target server has a different password than the DCs, the session ticket cannot be decrypted and the
    failure occurs.

    As someone previously mentioned, the easiest way to resolve this is to remove the client from the domain, make sure the account is deleted in active directory and re-join the client to the domain.

  12. #12

    Join Date
    Dec 2005
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Help please - strange error messages on W2k3 server

    Hmm, thanks for the info and suggestion. However to do this I would have to possibly remove and rejoin all 600+ machines from the network as most are now experiencing this error.

    During term time this is not going to be possible as there is only myself and one technician unless opf course we do a night shift!

    I have continued to investigate this and I have noticed anomalies within DNS on both DNS servers. We appear to have multiple computers with the same IP addresses listed in both the forward and reverse lookup zones so I assume the problem is getting worse. DCDiag and Netdiag both show no errors when run on the servers. I am considering stopping one of the DNS servers, removing the incorrect entries by cross referencing with DHCP and reloading on the remaining DNS server, restarting the second DNS server and copying the reconfigured zone across.

    Any thoughts?

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Help please - strange error messages on W2k3 server

    Make sure you enable DNS scavenging/aging.

  14. #14

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    786
    Thank Post
    1
    Thanked 34 Times in 32 Posts
    Rep Power
    24

    Re: Help please - strange error messages on W2k3 server

    Scavenging the stale records from DNS sounds like a good place to start, get one of the DNS servers sorted, delete the zones on the other server and rebuild it.

    If there is an issue with the DC’s replicating, you may have difficulties transferring zones and this could indicate a more serious problem.

  15. #15

    Join Date
    Dec 2005
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Help please - strange error messages on W2k3 server

    My plan seems to have worked, after two hours of cross referencing DHCP and DNS to delete incorrect entries everything now appears to be running without error, replication is working well across the four DC's.

    I'm still not happy with the second DNS server as the zones listed are not identical to the First DNS server, I uninstalled and reinstalled DNS but it just recollated the zones it had before.

    Should I delete the DNS server entries from the registry before reinstalling DNS?



SHARE:
+ Post New Thread

Similar Threads

  1. Customising Winlogon error messages
    By jman167 in forum Windows
    Replies: 1
    Last Post: 18th October 2007, 03:42 PM
  2. Printers logon script error messages
    By indie in forum Windows
    Replies: 1
    Last Post: 14th September 2007, 12:34 PM
  3. Weird error messages
    By _Bat_ in forum General Chat
    Replies: 5
    Last Post: 24th November 2006, 09:50 PM
  4. Haiku error messages in Windows Vista
    By Andrew_C in forum General Chat
    Replies: 0
    Last Post: 6th July 2006, 08:06 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •