Re: Service Ticket Request Failed - 677?

From: JR (johnnyrNOSPAM@bellsouth.net)
Date: 11/29/02 

From: "JR" <johnnyrNOSPAM@bellsouth.net>
Date: Fri, 29 Nov 2002 08:04:41 -0500

I have since found out that error message isn't really an error
message (at least I hope). I appears to just be Windows saying
the Kerberos ticket for that computer has expired, which is normal with Kerberos

Why these superfluous error messages show up at all is something I'd like
to know. It just clutters up the security event log - They appear when
you choose to monitor failed logon events which is quite a common practice.

Additionally, it would help if MS did a better job documenting these event
log messages. I spent a lot of time trying to find out what this error event
meant, only to find out it was simply a system information message.

For anyone else looking for Kerberos error events, there is a good article
on Kerberos and info on the error ids.
http://www.windowsitlibrary.com/Content/617/06/7.html#8

"JR" <johnnyrNOSPAM@bellsouth.net> wrote in message news:uCGCE1vlCHA.2116@tkmsftngp07...
> Thanks...I know about that... what I need to know is Why?
> That info at eventID.net tells what the error event is,
> in this case the ticket-granting ticket (TGT) is being revoked,
> but not What is causing the error event...
>
>
>
>
> "frank" <fbedolla@cotopaxi.com.mx> wrote in message news:#LiCL7ulCHA.1912@tkmsftngp04...
> > http://www.eventid.net/show.asp?DocId=6
> >
> > --
> >
> > Regards
> >
> > Francisco Bedolla Ramirez
> > (Work)
> > Mexico DF
> > W2K AS SP3
> > "JR" <johnnyrNOSPAM@bellsouth.net> escribió en el mensaje
> > news:exHYdxllCHA.1464@tkmsftngp07...
> > > Win2k Server SP3 / AD integrated DNS
> > > WinXp Pro SP1 clients
> > >
> > > I get this error event in my security log on a regular basis.
> > > Users can login and use resources, but this error event keeps
> > > appearing. All PCs are referenced in the event messages, so
> > > it isn't just one or two PCs.
> > > Does anyone know what it means or how to stop it? I checked
> > > eventid.net and google, but no help. Actually, at google there
> > > were quite a few posts about this, but no one seems to know
> > > what causes it.
> > >
> > > Event Type: Failure Audit
> > > Event Source: Security
> > > Event Category: Account Logon
> > > Event ID: 677
> > > Date: 11/27/2002
> > > Time: 6:12:33 AM
> > > User: NT AUTHORITY\SYSTEM
> > > Computer: SRV2K01
> > > Description:
> > > Service Ticket Request Failed:
> > > User Name: ARBORXP$
> > > User Domain: ARBOR01.COM
> > > Service Name: krbtgt/ARBOR01.COM
> > > Ticket Options: 0x2
> > > Failure Code: 0x20
> > > Client Address: 10.90.10.12
> > >
> > >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.423 / Virus Database: 238 - Release Date: 25/11/2002
> >
> >
>
>