KRB_AP_ERR_MODIFIED question

I have SBS 2003 Premium SP1 with XP Pro SP3 workstations. I recently had to
replace a workstation (WS1). In order to be efficient, I took the old
workstation (WS1) and gave it to someone else and gave a new one (WS2) to the
original person. Now I am getting an error message:

Event ID 4
Event Source Kerberos

The kerberos client received a KRB_ERR_MODIFIED erro from the server
COMPUTER1$. The target name used was cifs/COMPUTER2.mydomain.local. This
indicates that the password used to encrypt ....

I have removed both computers from the network by removing the computer
names from the domain using ADUC and making each computer their own work
group. I then add both machines to the domain again but no difference. Is
there something I can do without removing their accounts also (or even worse,
reformatting).

Are you cloning your XP systems? If the answer to this is yes, is your site
using sysprep?

"Carl Gross" <> wrote in message
news85CBC1B-9884-4C6D-BD7F-...
>I have SBS 2003 Premium SP1 with XP Pro SP3 workstations. I recently had
>to
> replace a workstation (WS1). In order to be efficient, I took the old
> workstation (WS1) and gave it to someone else and gave a new one (WS2) to
> the
> original person. Now I am getting an error message:
>
> Event ID 4
> Event Source Kerberos
>
> The kerberos client received a KRB_ERR_MODIFIED erro from the server
> COMPUTER1$. The target name used was cifs/COMPUTER2.mydomain.local. This
> indicates that the password used to encrypt ....
>
> I have removed both computers from the network by removing the computer
> names from the domain using ADUC and making each computer their own work
> group. I then add both machines to the domain again but no difference.
> Is
> there something I can do without removing their accounts also (or even
> worse,
> reformatting).

Describe cloning.

The new machines have XP Pro on them already. What I am doing is taking the
new machine and, since I used (no more) roaming profiles, I just logged on as
the new user on the new machine(WS1) so all the personal settings follow
through to the new machine.

I then took the old machine and logged on as the other user (WS2).

Since I never used sysprep, I guess the answer to your question is "no". Is
there a fix to my problem?

"neo" wrote:

> Are you cloning your XP systems? If the answer to this is yes, is your site
> using sysprep?
>
> "Carl Gross" <> wrote in message
> news85CBC1B-9884-4C6D-BD7F-...
> >I have SBS 2003 Premium SP1 with XP Pro SP3 workstations. I recently had
> >to
> > replace a workstation (WS1). In order to be efficient, I took the old
> > workstation (WS1) and gave it to someone else and gave a new one (WS2) to
> > the
> > original person. Now I am getting an error message:
> >
> > Event ID 4
> > Event Source Kerberos
> >
> > The kerberos client received a KRB_ERR_MODIFIED erro from the server
> > COMPUTER1$. The target name used was cifs/COMPUTER2.mydomain.local. This
> > indicates that the password used to encrypt ....
> >
> > I have removed both computers from the network by removing the computer
> > names from the domain using ADUC and making each computer their own work
> > group. I then add both machines to the domain again but no difference.
> > Is
> > there something I can do without removing their accounts also (or even
> > worse,
> > reformatting).
>
> .
>

Hello Carl,

Start here:
http://www.eventid.net/display.asp?e...rberos&phase=1

Do you also have event id 11 listed:
http://support.microsoft.com/kb/321044

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have SBS 2003 Premium SP1 with XP Pro SP3 workstations. I recently
> had to replace a workstation (WS1). In order to be efficient, I took
> the old workstation (WS1) and gave it to someone else and gave a new
> one (WS2) to the original person. Now I am getting an error message:
>
> Event ID 4
> Event Source Kerberos
> The kerberos client received a KRB_ERR_MODIFIED erro from the server
> COMPUTER1$. The target name used was cifs/COMPUTER2.mydomain.local.
> This indicates that the password used to encrypt ....
>
> I have removed both computers from the network by removing the
> computer names from the domain using ADUC and making each computer
> their own work group. I then add both machines to the domain again
> but no difference. Is there something I can do without removing their
> accounts also (or even worse, reformatting).
>