Dc Diag

[LukeC]

After reading a similar thread i thougth id run dc diag and everything has passed with the exception of the below can anyone offer any advice. Its a mixed 2003 and 2008 domain, 2 2008 R2 DC and 1 2003 DC, the functional level of the domain is Server 2003.

 

Starting test: systemlog

An Error Event occured. EventID: 0xC000001B

Time Generated: 06/26/2012 07:57:09

Event String: While processing a TGS request for the target

An Error Event occured. EventID: 0xC000001B

Time Generated: 06/26/2012 08:09:18

Event String: While processing a TGS request for the target

......................... PANTHER failed test systemlog

[pete]

It means you had an error in your system log on PANTHER in the last 24hrs.

 

Most (if not all) errors in the system log will cause DCdiag to spew that out.

 

Look up the specific event (Kerberos?) and determine whether it's something to be concerned about / you need to fix. If you're seeing a lot of these, you have a problem.

 

Specifically, are your DCs replicating properly?

 

repadmin /showrepl

 

repadmin /replsum

[LukeC]

Thanks replication is working fine all sucessful, there is alot of KDC error 27, i have inherited this network and it looks like the errors go back to 2011.

The error is

While processing a TGS request for the target server *****/****.LOCAL, the account ****$@****.LOCAL did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18. The accounts available etypes were 23 -133 -128 3 1.

[Firefox]

There error is pretty harmless, it's caused by running in a mixed mode setup and should disappear when you go fully 2008.

 

I can't find the article right now, but there was a change in the way 2008 handled the kerberos tickets

[LukeC]

Thanks for confirming i think i have read that i know there is a hotfix for it floating around but ill be going fully 2008 this summer for the DCs