Did you use an image to create the Citrix
server?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hboogz
Sent: Wednesday, November 15, 2006 12:43 PM
To: [email protected]
Subject: [ActiveDir] Strange DC behaviour and error
Hey Guys,
I receive this error on my DC and my newly created Citrix Server.
Event Type: Error
Event Source: Kerberos
Event
Category: None
Event
ID: 4
Date: 11/15/2006
Time: 12:30:17
PM
User: N/A
Computer: PHMAINDC1
Description:
The
kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/phmaindc1.phippsny.org. The target name used was
DNS/phmaindc1.phippsny.org. This indicates that the password used to encrypt the
kerberos service ticket is different than that on the target server. Commonly,
this is due to identically named machine accounts in the target realm ( PHIPPSNY.ORG), and the client realm.
Please contact your system administrator.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
The citrix server can't connect to the termincal server licensing component
on here and everytime a user logs in, they receive an access denied indicated
that they could retrieve their TS profile information.
everytime i try to run dsa.msc on the citrix box, i get an error.
I'm running windows 2003 standard R2 on AD and standard w/ SP1 on the
citrix box.
I also get this error/message when i run dcdiag on the dc
The account PHMAINDC1 is
not a DC account. It cannot
replicate.
Warning: Attribute userAccountControl of PHMAINDC1 is: 0x1000 = ( UF_W
ORKSTATION_TRUST_ACCOUNT )
Typical setting for a DC is 0x82000 = ( UF_SERVER_TRUST_ACCOUNT | UF_TR
USTED_FOR_DELEGATION )
This may be affecting replication?
Warning: Attribute userAccountControl of PHMAINDC1 is: 0x1000 = ( UF_W
ORKSTATION_TRUST_ACCOUNT )
Typical setting for a DC is 0x82000 = ( UF_SERVER_TRUST_ACCOUNT | UF_TR
USTED_FOR_DELEGATION )
This may be affecting replication?
any ideas ? i'm stuck with all my citrix users being denied logon!
--
HBooGz:\>
