No virus was detected on the workstation.Thanks again for your help.David Tuesday, July 21, 2009 11:41 PM Reply | Quote Microsoft is conducting an online survey to understand your opinion of A possible cause is that the system time is not synchronized between the computer 192.168.1.75 and SBSServer. You can find more information by reading ME314054". Want to Advertise Here? http://lanprolab.net/error-occurred/an-unexpected-error-occurred-during-logon-kerberos.php
Change the value data from NoSync to NT5DS. 4. Solution: It is clear now that the time difference (>5 min) between client and server causes the Kerberos authentication issue. I have put together a blog entry on how to analyze event 537. Join the community Back I agree Powerful tools you need, all for free.
See ME145828. Error Occurred During The Kerberos Reponse If this is OK then run this from the command line: W32TM /monitor to ensure that each member server/workstation is actually pointing to a DC. The events are logged at all hours, often at night and early morning. http://support.microsoft.com/kb/327889 Add link Text to display: Where should this link go?
Double-click Windows Time service. An Error Occurred During Logon 0xc00002ee NTP: +0.0000000s offset from local clock RefID: ntdev-dc-10.ntdev.microsoft.com [x.x.x.x] The computer returned on the RefID line is the timeserver with whom the client is synchronizing its time. Microsoft Customer Support Microsoft Community Forums | Search MSDN Search all blogs Search this blog Sign in AsiaTech: Microsoft APGC Internet Developer Support Team AsiaTech: Microsoft APGC Internet Developer Support Team IN THIS DISCUSSION Join the Community!
Email check failed, please try again Sorry, your blog cannot share posts by email. %d bloggers like this: home| search| account| evlog| eventreader| it admin tasks| tcp/ip ports| documents | see this x 134 Paul I had this problem on one of the Win2k Domain Controllers in a remote office. An Error Occurred During Logon Kerberos 537 David ¬† ------------------------------ Event Type:¬†Failure AuditEvent Source:¬†SecurityEvent Category:¬†Account Logon Event ID:¬†673Date:¬†¬†7/9/2009Time:¬†¬†12:53:33 AMUser:¬†¬†NT AUTHORITY\SYSTEMComputer:¬†SBSERVERDescription:Service Ticket Request:¬†¬†User Name:¬†¬†¬†¬†User Domain:¬†¬†¬†¬†Service Name:¬†¬†¬†¬†Service ID:¬†¬†-¬†¬†Ticket Options:¬†¬†0x40800000¬†¬†Ticket Encryption Type:¬†-¬†¬†Client Address:¬†¬†192.168.1.75¬†¬†Failure Code:¬†¬†0x25¬†¬†Logon GUID:¬†¬†-¬†¬†Transited Services:¬†- For more information, see Help Kerberos Logon Type 3 Error message on a Win2K Server looks like this; Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 537 Date: 7/23/2010 Time: 2:29:12 AM User: NT AUTHORITY\SYSTEM Computer:
Open Registry editor (regedit); navigate to the following registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\. check over here The problem could be caused because there is a time difference (greater than 5 minutes) between the two computers. There are some equivalents for windows 2000, use W32tm /? Email Reset Password Cancel Need to recover your Spiceworks IT Desktop password? Kerberos Logon Process
Connect with top rated Experts 19 Experts available now in Live! Kerberos requires that all the computers in the environment have system times within 5 minutes of one another. ¬† For more information: ¬† Appendix D: Kerberos and LDAP Troubleshooting Tips http://technet.microsoft.com/en-us/library/bb463167.aspx This process is automatic. his comment is here Well stop looking I have found a MSDN reference to the NTSTATUS codes.¬† ¬† Now in the above 2 examples the Status code: 0xC000006D means that ‚ÄúThe attempted logon is invalid.
Join Now Hi Everyone, Having a bit of problem here on a Server 2003 box that is a member server hosting WSUS and Sharepoint. An Error Occurred During Logon 4625 Members of the Active Directory sync with their local DC (local Go to Solution 4 Comments LVL 16 Overall: Level 16 Windows Server 2003 11 Message Expert Comment by:JamesDS2004-04-26 Zoodiaq See ME908355, ME917463 and ME926642 for additional information about this event.
By default, it should be the SBS 2K3 server. Most of the time you will beat your head against a wall trying to figure out what in the world these codes mean. Open Services console in ďAdministrative ToolsĒ. 2. An Error Occurred During Logon 0xc00006d Substatus 0x0 However, WSUS can be a blessing and a curse.
Right-click Lsa, point to New, and then click DWORD Value. 4. Command output: localhost [127.0.0.1]: ICMP: 0ms delay. The codes that I see most often when talking to customers is: Status code: 0xC000006D Substatus code: 0xC0000133 These 2 codes indicate that the workstation clock is more than 5 mins weblink If you have any questions please feel free to leave a comment. **Feb 14, 2011; Do to some unforseen issues at Prism Microsystems¬†I can no longer in good faith promote their
Featured Post 6 Surprising Benefits of Threat Intelligence Promoted by Recorded Future All sorts of threat intelligence is available on the web. x 119 EventID.Net In my case this event was generated by a logon failure due to the NetLogon component not being active. Some of these are copied below.