Kerberos Policy Settings

From: Frank Pesce (anonymous_at_discussions.microsoft.com)
Date: 04/29/04


Date: Thu, 29 Apr 2004 09:55:41 -0700

One of my Windows Adv. 2000 Servers repeatedly logged
1202,454,1000,& 412 Event ID errors in the application
event log. I found this article (278316) that specifically
addressed these errors and said the Group Policy file was
corrupted and gave a specific resolution to recreate the
LOCAL Group Policy.

I followed the steps and everything seemed to be fine. But
when I checked the policies I found that my DOMAIN
Password, Account Lockout and Kerberos Policy had been
wiped out (not defined). I remembered the Password and
account policy and reset them. But I do not know what the
Kerberos Policies where set to. Should I just enable all
of them in default mode? Or should I just leave it.
Because I don't remember if they were even setup.

Any help would be greatly appreciated!



Relevant Pages

  • Re: Pushing software with Group Policy
    ... Here are the event log errors. ... I am trying to push Acrobat Reader with group policy. ... Got 1 Windows 2003 SBS and 1 client computer. ... The client still doesnt installs the software? ...
    (microsoft.public.windows.server.sbs)
  • Re: Event ID 1058 & 1030 Error
    ... Windows cannot query for the list of Group Policy objects. ... event log for possible messages previously logged by the policy engine ... see Help and Support Center at ... I agree with Meinolf regarding seeing an unedited ipconfig /all from two of your DCs and one from the desktop this is occuring on. ...
    (microsoft.public.windows.server.active_directory)
  • Re: RENDOM /end fails
    ... Cross Forest Group Policy ... Ethernet adapter Local Area Connection: ... Also post any Event log errors that exist under any of the logs. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Getting tired of Error 1091
    ... Application Event Log ... The Group Policy client-side extension Security failed to log RSOP ... started seeing this after uninstalling SP2, ... Calling an illegal alien an "undocumented worker" is like calling a ...
    (microsoft.public.windows.server.sbs)
  • Re: Audit Account Logon events not logged...
    ... In continuation to what Ryan suggested, you can set this via Group Policy. ... You can set the size of the event log and how it makes more room... ... >> When i look at the policy result on a domain controller, ...
    (microsoft.public.win2000.active_directory)