How to repair multiple KDC an Netlogon errors

netlogonwindows-server-2003

I have several erros in the system event log of my single Windows 2003 SP2 domain controller.

Multiple member computers on the domain are listed in these errors.
I am seeing two similar errors for each computer one second apart in the event log.

Event ID 7
Source KDC
The Security Account Manager failed a
KDC request in an unexpected way. The
error is in the data field. The
account name was MEMBERNAME$@DOMAIN.LOCAL and lookup type
0x8.

followed by

Event ID 7
Source KDC
The Security Account Manager failed a
KDC request in an unexpected way. The
error is in the data field. The
account name was MEMBERNAME$ and lookup type
0x8.

The Lookup Types are also different, I have 0x8, 0x28, 0x0, 0x20.

I am also receiving other authentication errors in the same time frame as all of the KDC errors

Event ID 5722
Source NETLOGON
The session setup from the computer
MEMBERNAME failed to authenticate. The
name(s) of the account(s) referenced
in the security database is MEMBERNAME$.
The following error occurred: Access
is denied.

I have run dcdiag /v to see if there was something wrong with Active Directory, but all tests passed.
I also ran netdiag /v and it appers all of those tests ran.

Any ideas on where to start for this issue?

Thank you,
Keith

Best Answer

When there are Kerberos problems, it's probably dns. If it's not dns, it's probably dns

(From Marc Minasi)

As part of standard checkup, could you check:

  • Time. All AD members mustn't have more than 5 minutes difference from DC by default
  • dnsdiag: check that all dns zone are replicated
  • Do you have enough free space on DC ?
  • If you still have Windows 2000 DC/wks, you may check http://support.microsoft.com/kb/812499
Related Topic