I found the following error in my System Event Viewer for the past 2 weeks
every hour. This is a test machine that mimics production. I removed the
server from the domain, rebooted, and added it back to the domain. Within 2
days I got it again. I don't know what it could be, except I know the
server listed in error is a coworker's. Any ideas?

Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 4
Date: 1/12/2007
Time: 12:10:29 PM
User: N/A
Computer: LE79TEST
Description:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/coworkersName-lm-pws3.XLAB.corp.Company.com. The target name used was
cifs/coworkersName-LM-001.XLAB.corp.Company.com. This indicates that the
password used to encrypt the kerberos service ticket is different than that
on the target server. Commonly, this is due to identically named machine
accounts in the target realm (XLAB.CORP.Company.COM), and the client realm.
Please contact your system administrator.

I have had this issue in the last two weeks. Mine was caused by two
machines having the same ip address. I had to go into WINS and
tombstone the machines and then release and renew the IP addresses so
they got different IP addresses. Hope this helps

Stephen

gen wrote:

Hello gen,

Check this out:
http://www.eventid.net/display.asp?e...eros &phase=1

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.