Netdiag kerberos failure

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Upgraded our windows nt domain to windows server 2003 active directory. Our
windows 2000 prof workstations were getting event id 5788 5789 errors
constantly. Ran netdiag on workstation with a failure on kerberos and ldap.
It was suggested that I disjoint the workstation from the domain and rejoin,
which I did. This has solved our event id errors and the ldap failure in
netdiag. I am however still getting a failure in netdiag on kerberos. The
error states [FATAL] Kerberos does not have a ticket for computername$. I
don't seem to be having any trouble login in to the network or accessing
servers, etc. Can I ignore this error or is there something wrong here.
Thanks.
 
I don't know offhand the problem by I suggest you go to http://www.eventid.net to
search for those Event ID's. Below is a link from there for Event ID 5788

http://eventid.net/display.asp?eventid=5788&eventno=350&source=NETLOGON&phase=1

Common errors for starting AD domains are dns problems. Also make sure that the
domain computers are in time synch with the new domain controller which is very
important for kerberos. Once they are correctly joined to the domain, they should
keep in time synch with the domain controller that is the pdc fsmo which is the time
God for the domain. It may also help to do the kerberos test in verbose mode as in
netdiag /test:kerberos /v.

Check the Event Viewer on the domain controller and run first netdiag on it and then
dciag to see if it reports problems with it's configuration. Dns misconfiguration
will cause many problems. Your domain controller must point to itself via it's static
assigned IP address as it's preferred dns server in tcp/ip properties and W2K/Xp Pro
domain members must point to the domain controller and never have an ISP dns server
listed as the preferred dns server of a domain member. The links below may help
including how to verify that the _srv records have been created for the zone. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;291382
http://support.microsoft.com/?kbid=241515
 
Back
Top