Go Back   TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help
Become a Member!
Forgot your username/password?
Tags Active Topics RSS Search Mark Forums Read

Sponsored Links



Event ID: 537 Kerberos

Windows Server Help


Reply
 
Thread Tools Search this Thread
  #1  
Old 29-07-2005
Evan
 
Posts: n/a
Event ID: 537 Kerberos

Greetings

I'm getting the following error on
My windows 2003 member servers when I log on with
my Domain Admin account
Domain is a Windows 2000 Domain
I think this happened after SP1 was installed on the member servers

I did find that the Status code: 0xC000040A
relates to
STATUS_NO_S4U_PROT_SUPPORT

However I cannot find much info on this

Any input would be appreciated

Thanks

- Evan





Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 7/28/2005
Time: 8:01:46 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER-2
Description:
Logon Failure:
Reason: An error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Authz
Authentication Package: Kerberos
Workstation Name: SERVER-2
Status code: 0xC000040A
Substatus code: 0x0
Caller User Name: SERVER-2$
Caller Domain: XYZ
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1004
Transited Services: -
Source Network Address: -
Source Port: -






Reply With Quote
  #2  
Old 29-07-2005
Richard Oltmann
 
Posts: n/a
Re: Event ID: 537 Kerberos

try this link and see if any of this is helpful
http://www.eventid.net/display.asp?e...curity&phase=1
Richard
"Evan" <ewgny@hotmail.com> wrote in message
news:OaDaHQ9kFHA.2444@tk2msftngp13.phx.gbl...
> Greetings
>
> I'm getting the following error on
> My windows 2003 member servers when I log on with
> my Domain Admin account
> Domain is a Windows 2000 Domain
> I think this happened after SP1 was installed on the member servers
>
> I did find that the Status code: 0xC000040A
> relates to
> STATUS_NO_S4U_PROT_SUPPORT
>
> However I cannot find much info on this
>
> Any input would be appreciated
>
> Thanks
>
> - Evan
>
>
>
>
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 537
> Date: 7/28/2005
> Time: 8:01:46 PM
> User: NT AUTHORITY\SYSTEM
> Computer: SERVER-2
> Description:
> Logon Failure:
> Reason: An error occurred during logon
> User Name:
> Domain:
> Logon Type: 3
> Logon Process: Authz
> Authentication Package: Kerberos
> Workstation Name: SERVER-2
> Status code: 0xC000040A
> Substatus code: 0x0
> Caller User Name: SERVER-2$
> Caller Domain: XYZ
> Caller Logon ID: (0x0,0x3E7)
> Caller Process ID: 1004
> Transited Services: -
> Source Network Address: -
> Source Port: -
>
>
>
>
>



Reply With Quote
  #3  
Old 29-07-2005
Evan
 
Posts: n/a
Re: Event ID: 537 Kerberos

Thanks for the response Richard
I've combed over eventid.net prior to posting here and haven't found
anything
The strange thing is that the event ID 537 comes up on the member server
not the Domain controller's event log to which my user account is
authenticating to.
This makes me think that the windows 2000 DC accepts the kerberos
authentication,
however the Windows 2003 member server expects more from the token than what
the Windows 2000 DC can return to it.

I'm thinking that the Windows 2003 kerberos is not the same as the windows
2000 kerberos
hence the return code of: STATUS_NO_S4U_PROT_SUPPORT

- Evan




"Richard Oltmann" <roltmann62@hotmail.com> wrote in message
news:%23n$3TY9kFHA.3936@TK2MSFTNGP10.phx.gbl...
> try this link and see if any of this is helpful
> http://www.eventid.net/display.asp?e...curity&phase=1
> Richard
> "Evan" <ewgny@hotmail.com> wrote in message
> news:OaDaHQ9kFHA.2444@tk2msftngp13.phx.gbl...
>> Greetings
>>
>> I'm getting the following error on
>> My windows 2003 member servers when I log on with
>> my Domain Admin account
>> Domain is a Windows 2000 Domain
>> I think this happened after SP1 was installed on the member servers
>>
>> I did find that the Status code: 0xC000040A
>> relates to
>> STATUS_NO_S4U_PROT_SUPPORT
>>
>> However I cannot find much info on this
>>
>> Any input would be appreciated
>>
>> Thanks
>>
>> - Evan
>>
>>
>>
>>
>>
>> Event Type: Failure Audit
>> Event Source: Security
>> Event Category: Logon/Logoff
>> Event ID: 537
>> Date: 7/28/2005
>> Time: 8:01:46 PM
>> User: NT AUTHORITY\SYSTEM
>> Computer: SERVER-2
>> Description:
>> Logon Failure:
>> Reason: An error occurred during logon
>> User Name:
>> Domain:
>> Logon Type: 3
>> Logon Process: Authz
>> Authentication Package: Kerberos
>> Workstation Name: SERVER-2
>> Status code: 0xC000040A
>> Substatus code: 0x0
>> Caller User Name: SERVER-2$
>> Caller Domain: XYZ
>> Caller Logon ID: (0x0,0x3E7)
>> Caller Process ID: 1004
>> Transited Services: -
>> Source Network Address: -
>> Source Port: -
>>
>>
>>
>>
>>

>
>



Reply With Quote
  #4  
Old 09-12-2005
Member
 
Join Date: Dec 2005
Posts: 1
Re: Event ID: 537 Kerberos

We had similar errors after applying Windows Server 03 SP1; I noticed that I could reproduce the errors after kicking off Diskeeper (version 8 I think) on the server. Executive software said they couldnt reproduce the error so I started looking elsewhere, and got nowhere. As you may have noticed there are not a lot of hits on this topic in the wild. I think we reduced about ninety something percent of the messages today, and the fix was two part.
First set the Windows Firewall from disabled to manual. That alone didnt fix it for me, but then updating Diskeeper to version 10 did seem to fix it. Firing off Diskeeper now does NOT trigger a million security entries.
I had thought it was a local system issue, but adding a domain account to Diskeeper did not fix the problem either (as in firing the service via a domain account). Diskeeper has a white paper out about some firewall config changes now also.
Reply With Quote
  #5  
Old 22-10-2006
Member
 
Join Date: Oct 2006
Location: UK
Posts: 2
Re: Event ID: 537 Kerberos

Can anyone clarify if whether the 2000 and 2003 kerberos are the same?
Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help
Tags: ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "Event ID: 537 Kerberos"
Thread Thread Starter Forum Replies Last Post
Event ID 3 Kerberos TomJerzey Active Directory 3 05-06-2008 01:33 PM
Kerberos error event ID:4 Adam Raff Windows Server Help 6 18-04-2008 02:17 PM
Event ID 4 Source Kerberos etienne Active Directory 1 11-04-2007 01:53 AM
Event ID 3 Kerberos KDC_ERR_S_PRINCICAL_UNKNOWN Delil Active Directory 3 06-03-2007 12:52 AM
Event ID: 537 Kerberos Authz bigboy Windows Security 3 11-01-2007 05:38 PM


All times are GMT +5.5. The time now is 04:46 PM.