From: Frank on
I have a domain with both 03 and 08 DC's, and exchange 07

On the 03 DC I get an event ID 27 (see below). I don't get the same
error on the 08 DC

Can I safely ignore this error and wait to retire the 03 server, or do
I need to do something?

regards

Frank

Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 27
Date: 16/04/2010
Time: 08:13:23
User: N/A
Computer: SVR02
Description:
While processing a TGS request for the target server krbtgt/IPR.LOCAL,
the account ServerName$@DOMAIN did not have a suitable key for
generating a Kerberos ticket (the missing key has an ID of 8). The
requested etypes were 18. The accounts available etypes were 23 -133
-128 3 1.

From: Meinolf Weber [MVP-DS] on
Hello Frank,

KDC 27:
It's a normal error when running a mixed w2k w2k8 AD. W2k8 has more encryption
algorithms than w2k3. You can ignore it.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have a domain with both 03 and 08 DC's, and exchange 07
>
> On the 03 DC I get an event ID 27 (see below). I don't get the same
> error on the 08 DC
>
> Can I safely ignore this error and wait to retire the 03 server, or do
> I need to do something?
>
> regards
>
> Frank
>
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 27
> Date: 16/04/2010
> Time: 08:13:23
> User: N/A
> Computer: SVR02
> Description:
> While processing a TGS request for the target server krbtgt/IPR.LOCAL,
> the account ServerName$@DOMAIN did not have a suitable key for
> generating a Kerberos ticket (the missing key has an ID of 8). The
> requested etypes were 18. The accounts available etypes were 23 -133
> -128 3 1.


From: Frank on
Meinolf Weber [MVP-DS] wrote:

> Hello Frank,
>
> KDC 27:
> It's a normal error

Thanks for the reply

F