KDC - 27
- Source » KDC
- Event ID » 27
- Type » Error
- Category » None
- User » N/A
- Computer » LOCALDC
- Log » System
- Opcode »
- Keywords »
- InstanceID » 0
Description »
While processing a TGS request for the target server krbtgt/FQDN.EXAMPLE.COM, the account ACCOUNT@FQDN.EXAMPLE.COM did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18. The accounts available etypes were 23 -133 -128 3 1.Data formatted as » None
This event is typically seen on a Windows 2003 domain controller.
It suggests that somebody is authenticating with the DC from a Windows Vista/7/8 computer, which supports different etypes to Windows XP/2003.
The later client OS should fall back to an etype supported by the DC.
The event can be ignored.