Short of putting some extra load on your DCs (failed kerb + logging), you should be ok to wait until Monday if you made me guess. Historically, we’ve seen no user impact from this issue. But you could be the first. :)

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Saturday, December 03, 2005 10:03 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] exchange kerberos errors(OT)

 

 

 

Aside from all the events logged, are there any bad ramifcations from this error for Exchange that you know of?

Or is this preety benign and trivial(well, aside from all the logs on DC's)?

i won't be in work till Monday to get and apply the fix. Will it hurt anything to wait till then?

 

Thanks alot.



 

On 12/3/05, Eric Fleischman <[EMAIL PROTECTED]> wrote:

We have observed this in the past on many systems. It may not be the same issue, but it is very likely the same.

It was cleared with a QFE we built as there was a Windows issue at play.

We have had threads on this previously: http://www.mail-archive.com/activedir@mail.activedir.org/msg24917.html

 

I would obtain that QFE and put it on your Exchange server. It will likely clear the issue.

 

~Eric

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Saturday, December 03, 2005 5:54 AM
To: activedirectory
Subject: [ActiveDir] exchange kerberos errors(OT)

 

I've been geeting Event ID 675 errors on my DC's lately.

 

The accounts referenced are the machine accounts of my Exchange servers.

 

The error is as follows-

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 675
Date:  12/2/2005
Time:  3:58:39 PM
User:  NT AUTHORITY\SYSTEM
Computer: OPNYC10
Description:
Pre-authentication failed:
  User Name:  EXNYC02$
  User ID:  MYDOMAIN\EXNYC02$
  Service Name:  krbtgt/OPANDCO.COM
  Pre-Authentication Type: 0x2
  Failure Code:  0x18
  Client Address:  192.168.20.1

I'm running a win2k sp4 forest in native mode and exchange 2k in native mode.

I don't know if this is something I should be worried about or not.

Thanks

 

 

 

Reply via email to