|
Thanks Todd!! - that whitepaper is
great.
Eric... Thanks for the information. I thought
it may be one of those "check engine" light warnings with no real world
meaning. However, I am reluctant to apply the hotfix without more detailed
information on what the issue is and how the HF fixes it. It would be nice
to get a copy of whatever documentation that goes with the HF. Generally it
is okay to put black electrical tape over the check engine light so it goes
out... but sometimes not... ;-)
-Stuart Fuller
http://www.microsoft.com/downloads/details.aspx?FamilyID=7dfeb015-6043-47db-8238-dc7af89c93f1&DisplayLang=en
Microsoft just published a Kerberos
Troubleshooting White Paper... It is pretty
good.
Todd
From:
Eric Fleischman [mailto:[EMAIL PROTECTED] Sent: Saturday, April 03, 2004
4:22 PM To:
[EMAIL PROTECTED] Subject: RE: [ActiveDir] Kerberos
event ID's 677
I just saw this post.
Sorry, I would have replied sooner if I had noticed
it.
The good is that this
is typically benign. If anything, I'd say we over-report this error. Typically
this error is thrown because the client asked the server to talk a language that
it could not. The client then said "ok how about this" and life is fine, but in
the meantime the server tossed an event and scared the administrator. It's
unfortunate that the error text isn't
better.
So, you can ignore the
event.
There is a QFE that
should help suppress them. If you call the 800 support # and ask them to send
you Q824905 that should suppress some of them. But again, this is benign, so I
wouldn't sweat it.
~Eric
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of
Fuller, Stuart Sent: Thursday, April 01, 2004
10:12 AM To:
'[EMAIL PROTECTED]' Subject: [ActiveDir] Kerberos
event ID's 677
Has anyone else been seeing a
plethora of "service ticket request failed" event ID 677 logs in their Security
logs on their Windows 2000 SP4 DC's?? The failure code is "0xE" and the
sources seem to be Windows 2003 member
servers.
I have queried our MS support and
they told me to try a hot fix from KB 824905. Unfortunately, even through
the hotfix is from November 2003, the KB article is not available on TechNet or
on MS premier support web site. So in keeping with today's theme of
missing documentation from Microsoft... anybody have more information on this
article, hotfix, or this issue in general?? I would like to know what this
hotfix is actually suppose to do before actually applying on my test bench
DC's.
Thanks,
Stuart
Fuller
|