⚑ Deus Ex Machina ➽ Eventlog Lookup

Deus Ex Machina » Eventlog » Event 27 - KDC

KDC - 27


Error

Description »
While processing a TGS request for the target server krbtgt/FQDN.EXAMPLE.COM, the account ACCOUNT@FQDN.EXAMPLE.COM did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18.  The accounts available etypes were 23  -133  -128  3  1. 
Data formatted as » None

This event is typically seen on a Windows 2003 domain controller.

It suggests that somebody is authenticating with the DC from a Windows Vista/7/8 computer, which supports different etypes to Windows XP/2003.

The later client OS should fall back to an etype supported by the DC.

The event can be ignored.