The kerberos subsystem encountered a PAC verification failure

In the local event log I am receing the following error Event ID 7 "The
kerberos subsystem encountered a PAC verification failure". I found article
88326 regarding
this issue and ran the steps that they recommend. All services are fine
with the exception of KDCSVC. When I enter the command Sc query KDCSVC I
reveive the following message:

OpenService Failed 1060:
The specified service does not exsist as an installed service

I could not find any information on how to resolve this issue. What
problems does
this creat and how do I go about resolving it?

Hi.



Is the machine on which you are running the sc.exe tool a domain controller?
If not, the KDC service will not be installed, and you don't have to worry
about it.



Other things to check..



a.. UDP port 138 is open between the client and DC


a.. Use the Netdom utility to reset the secure channel of each affected
machine. How To Use Netdom.exe to Reset Machine Account Passwords of a
Windows WGID:493 ID: 325850


If all else fails, turn up Kerberos logging as per..

216052 How to Enable Kerberos Debugging in Windows 2000
http://support.microsoft.com/?id=216052





HTH, Les



This posting is provided "AS IS" with no warranties, and confers no rights.





"Dan S" <DanS@discussions.microsoft.com> wrote in message
news:3BB1D3CF-9754-4B1F-844D-1471F309AA26@microsoft.com...
> In the local event log I am receing the following error Event ID 7 "The
> kerberos subsystem encountered a PAC verification failure". I found
> article
> 88326 regarding
> this issue and ran the steps that they recommend. All services are fine
> with the exception of KDCSVC. When I enter the command Sc query KDCSVC I
> reveive the following message:
>
> OpenService Failed 1060:
> The specified service does not exsist as an installed service
>
> I could not find any information on how to resolve this issue. What
> problems does
> this creat and how do I go about resolving it?
>

PS - if you are running on a W2K3 server - the service is KDC not KDCSVC.

Thanks, Les

"Lesley Kipling [MSFT]" <leskip@online.microsoft.com> wrote in message
news:un7A4NFNFHA.2580@TK2MSFTNGP09.phx.gbl...
> Hi.
>
>
>
> Is the machine on which you are running the sc.exe tool a domain
> controller? If not, the KDC service will not be installed, and you don't
> have to worry about it.
>
>
>
> Other things to check..
>
>
>
> a.. UDP port 138 is open between the client and DC
>
>
> a.. Use the Netdom utility to reset the secure channel of each affected
> machine. How To Use Netdom.exe to Reset Machine Account Passwords of a
> Windows WGID:493 ID: 325850
>
>
> If all else fails, turn up Kerberos logging as per..
>
> 216052 How to Enable Kerberos Debugging in Windows 2000
> http://support.microsoft.com/?id=216052
>
>
>
>
>
> HTH, Les
>
>
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
>
> "Dan S" <DanS@discussions.microsoft.com> wrote in message
> news:3BB1D3CF-9754-4B1F-844D-1471F309AA26@microsoft.com...
>> In the local event log I am receing the following error Event ID 7 "The
>> kerberos subsystem encountered a PAC verification failure". I found
>> article
>> 88326 regarding
>> this issue and ran the steps that they recommend. All services are fine
>> with the exception of KDCSVC. When I enter the command Sc query KDCSVC
>> I
>> reveive the following message:
>>
>> OpenService Failed 1060:
>> The specified service does not exsist as an installed service
>>
>> I could not find any information on how to resolve this issue. What
>> problems does
>> this creat and how do I go about resolving it?
>>
>
>