Home > Event Id > Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8)

Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8)

Contents

Are you able to try the DefaultEncryptionType reg key solution? All Rights Reserved. You can refer to the following post http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/29f55875-f3ee-476c-9d74-94f1b74edb31 Also Go to Solution 6 3 2 3 Participants fisher_king(6 comments) PaidToSki(3 comments) Navdeep(2 comments) LVL 12 Windows Server 20086 Windows Server 20034 So, I continue to get the errors. 0 Message Expert Comment by:PaidToSki ID: 385758102012-11-07 And you experience no loss of functionality due to the error, just events to ignore in http://supportcanonprinter.com/event-id/event-id-4-security-kerberos-spn.html

Thanks. 0 Comment Question by:fisher_king Facebook Twitter LinkedIn https://www.experts-exchange.com/questions/27491954/KDC-Event-ID-27-errors-on-Server-2003-in-Server-2008-R2-domain.htmlcopy LVL 12 Best Solution byNavdeep That hotfix doesn't mention about the EventiD 27. All other trademarks are property of their respective owners. The issue is solved by the hotfix described in ME978055. All of our servers are running Windows 2003 R2 and Windows 2008 R2.

Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8)

Close Box Join Tek-Tips Today! Enable DES encryption on 2008 machines so the 2003 DC can authenticate requests – probably best to add it to the default domain policy.. Bookmark the permalink. ← Modify message size limits in Exchange 2010 How to move AutoCorrect entries in Word from one computer to another computer → Recent Posts Setup Exchange Online Office

Proposed as answer by Meitzi Monday, March 07, 2011 10:22 AM Monday, January 18, 2010 7:23 AM Reply | Quote Moderator 0 Sign in to vote Hi Mark,How's everything going? You get these KDC event's since you are running 2003R2 Server and you have 2008R2 or 2008 domain and Clients windows 7 . Most of my errors are computer account, but some are users on Win 7 machines. Event Id 27 E1cexpress This Article and the Links apply to… Windows 7 Windows Server 2008 Changing the Backup Exec Service Account and Password Video by: Rodney This tutorial will walk an individual through locating

The domain controller is just informing the client what Etypes it supports. Event Id 27 Network Link Is Disconnected The entire risk of the use or the results from the use of this document remains with the user.Active Directory, Microsoft, MS-DOS, Windows, Windows NT, and Windows Server are either registered I didn't try the DefaultEncryptionType mod, but I may setup a lab in a sandboxed VM environment and give that a try, reg mods aren't my favorite thing to do in Please note that enabling one suite means that you enable only that kind of encryption suite, that's why we re-enable the standard rsadsi." x 32 Anonymous From a support forum: "The

That being said, we are a ski area and are about to open our mountain for winter operations, so I'm disinclined to disjoin the 2k3R2 machine. Event Id 27 E1dexpress If you are experiencing a similar issue, please ask a related question Suggested Solutions Title # Comments Views Activity Non domain computers can't connect to wireless network using radius 7 67 The accounts available etypes were 23 -133 -128 3 1. Event Type: Error Event Source: KDC Event Category: None Event ID: 27 Date:  9/28/2010 Time:  1:21:04 PM User:  N/A Computer: DC   Description: While processing a TGS request for the target server krbtgt/DOMAIN.COM, the account [email protected] did not have

Event Id 27 Network Link Is Disconnected

My 2003 BDC is generating more and more of these as we get more and more Win 7 clients on the network. I added another 2008 server and promoted that to a domain controller and after making sure that all the 3 servers did replicate without errors, I demoted the server 2003 leaving Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8) But I re-read the KB article more closely and applied the GP changes outlined at the bottom of it. Event Id 16 Kerberos-key-distribution-center What is TGS?

Thanks for the response, I truly appreciate it. 0 Message Author Comment by:fisher_king ID: 385781222012-11-07 There is no loss of functionality that I have seen. http://supportcanonprinter.com/event-id/event-id-3-security-kerberos-kdc-err-s-principal-unknown.html The accounts available etypes were 23-133-12831. I found an explanantion and hotfix for user accounts causing this error: http://support.microsoft.com/kb/978055. For more information, please refer to the following articles: The security principals and the services that use only DES encryption for Kerberos authentication are incompatible with the default settings on Event Id 27 E1iexpress

But is there a way to easily eliminate the errors? Type: Error Description:While processing a TGS request for the target server the account did not have a suitable key for generating a Kerberos ticket (the missing key has an Are you an IT Pro? Source How to fix?

I understand what causes the problem, but I want to get rid of the errors. Event Id 27 Windows Update Client All rights reserved.Unauthorized reproduction or linking forbidden without expressed written permission. ShouldI uncheck aes256...

By creating an account, you're agreeing to our Terms of Use and our Privacy Policy Not a member?

  • Thanks for your help. 0 Message Author Closing Comment by:fisher_king ID: 373032582011-12-17 The GP changes in the MS KB article appear to have fixed the problem.
  • Close Reply To This Thread Posting in the Tek-Tips forums is a member-only feature.
  • Concepts to understand: What is Kerberos?
  • Join our community for more solutions or to ask questions.
  • Join your peers on the Internet's largest technical computer professional community.It's easy to join and it's free.
  • Enable both des_cbs_md5 and (the standard 2003 rc4_hmac_md5).
  • For more information, please refer to the following articles: The security principals and the services that use only DES encryption for Kerberos authentication are incompatible with the default settings on a
  • Additional info.
  • All of our servers are running Windows 2003 R2 and Windows 2008 R2.
  • The client is too small to justify the new hardware required for a second 2k8 DC.

Thanks to Mark Parris for his invaluable assistance in this blog. The article provides information about a hotfix that solved my problem. Computer Configuration\Security Settings\Local Policies\Security Options Enable - Network security: Configure encryption types allowed for Kerberos Types: DES-CBC-MD5 & DES-CBC-CRC (and all the new types AES256-CTS-HMAC-SHA1-96, AES128-CTS-HMAC-SHA1-96, RC4-HMAC) This should allow the Kdc Event 26 Mark Marked as answer by Sainath IRP_MJ_CREATEMVP, Moderator Friday, March 05, 2010 4:43 AM Monday, January 25, 2010 8:19 PM Reply | Quote Microsoft is conducting an online survey to understand

Join the IT Network or Login. Friday, January 22, 2010 1:48 AM Reply | Quote Moderator 0 Sign in to vote Hi, have the same issue. Leave a Reply Cancel reply Enter your comment here... have a peek here Email Reset Password Cancel Need to recover your Spiceworks IT Desktop password?

I will report back on findings, if any. I found that article previously. I have finally decided to write an article because this seems to get asked several times a day lately. Thanks.

I suggest you to try with a GPO to enable computer settings\windows settings\security settings\security options\network security\configure encription type. Make sure that under the "Common" tab of the new registry key to be sure to select "Remove this item when it is no longer needed", this will then remove the The accounts available etypes were 23 -133 -128 3 1.

Dec 11, 2012 While processing a TGS request for the target server krbtgt/EUROMIDS.LOCAL, the account [email protected] did not have a suitable Of late, have been getting numerous Event ID 27 and source KDC errors on the windows server 2003 r2 which states: While processing a TGS request for the target server krbtgt/amanua.net,

Since the errors are benign, I'll wait until April, at which time I will likely go straight to 2k12. The WMI Performance Adapter service terminated with the following error:%%-2147467259 Debugging UserEnv 1055 RSS feed Google Youdao Xian Guo Zhua Xia My Yahoo! Information in these documents, including URL and other Internet Web site references, is subject to change without notice. If the Kerberos authentication works properly, you can safely ignore the events.

Users and computers are being authenticated by any one of the servers and they can use the network resources but need to fix this problem.Any idea and if I go ahead While processing a TGS request for the target server krbtgt/DOMAIN, the account [email protected] did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of Stats Reported 7 years ago 5 Comments 15,670 Views Other sources for 27 e1express e1cexpress e1kexpress Outlook e1yexpress e1qexpress Microsoft-Windows-Hyper-V-VmSwitch iScsiPrt See More Others from KDC 29 11 26 20 7 Fill in your details below or click an icon to log in: Email (required) (Address never made public) Name (required) Website You are commenting using your WordPress.com account. (LogOut/Change) You are

Vista clients are then falling back to the supported types.

May 05, 2010 While processing a TGS request for the target server krbtgt/GEJCC.GEJOHNSON.COM, the account [email protected] did not have a suitable ADMT Now Supports Server 2012/2012 R2 Can't Add the Role "Active Directory Domain Services" to my 2008 R2 Server Recent CommentsArchives July 2014 June 2014 April 2014 October 2013 September 2013 The accounts available etypes were 23 -133 -128 3 1.What would be causing this and what is the best way to resolve this? Home Best Practices Manuals Good Stuff Home > Server 2003, Server 2008 R2 > KDC Event ID 26 and 27 logged on 2003DC KDC Event ID 26 and 27 logged on

I did not apply the HotFix. RE: Event ID 27 and Source KDC amanua (TechnicalUser) (OP) 17 Feb 14 12:47 Per research, noted that the error was by design in an environment of server 2003 and 2008 Is the fix a combination of both the GPO and the HF? 0 Message Author Comment by:fisher_king ID: 385749062012-11-06 Actually, the problems returned a short time after I thought the