Kerberos pre-authentication for 'computer' account

[tony72000]

Does any one know how to turn off Kerberos pre-authentication for computer account?

I have a UNIX file server that's given me pre-authentication failures in the event log. I know I can safely ignore these errors; I just want to keep the size of the event log to a minimum.

Thanks.

 

[itsp1965]

I am guessing this Unix computer is participating in your AD environment? If that's the case it relies on a Kerberos domain being available thus the error messages. I don't know if you can suppress them or not, unless the server stops participating in AD

 

[tony72000]

It is participating in our AD environment. User accounts have this option, but computer accounts do not.

Will I have to ignore failure audits?

 

[itsp1965]

What is the Eventlog ID that is generated for these events?

 

[itsp1965]

MS has a couple of KB articles regarding this;

http://support.microsoft.com/search...d=1131&query=Kerberos+pre-authentication&adv=

Hope this helps.

 

[tony72000]

This is the event that is logged:

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 675
Date: 02/03/2007
Time: 16:23:40
User: NT AUTHORITY\SYSTEM
Computer: SERVERNAME
Description:
Pre-authentication failed:
User Name: FILESERVERNAME$
User ID: DOMAIN\FILESERVERNAME$
Service Name: krbtgt/DOMAIN.COM
Pre-Authentication Type: 0x0
Failure Code: 0x19
Client Address: ***.***.**.***


For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

 

[itsp1965]

Check the comments in eventid.net regarding this

http://www.eventid.net/display.asp?eventid=675&eventno=62&source=Security&phase=1

Hope this helps