| Event Id | 14 |
| Source | Kerberos |
| Description | There were password errors using the Credential Manager. To remedy launch the Stored User Names and Passwords control panel applet and reenter the password for the credential <username> |
| Event Information | This information from some newsgroups may help you: ------------------------------------------------------------------------------ Kerberos is the default authentication method used in a Windows 2000/2003 domain and Windows 2000/2003/XP Pro computers can use it and will use it by default. This is not something that can or should be disabled. Computers and users authenticate with the KDC and use the tickets to access domain resources. If kerberos fails the users/computers should be able to fall back to lm/ntlm/ntlmv2 though things like ipsec policy, if used, may fail without kerberos authentication. Active Directory and kerberos depends heavily on DNS and if DNS is not configured correctly [as in ISP dns servers being listed as a preferred dns server in tcp/ip properties of a domain computer] all kinds on problems can happen in the domain. Simple network connectivity problems can also cause similar problems. What I would suggest is that you first make sure your DNS is working correctly and use the support tools netdiag, dcdiag, and gpotool on your domain controllers and netdiag on domain computers to check for domain/AD/dns/network connectivity health. The link below has a lot of good information about Active Directory dns and the support tools are located in the support/tools folder of the installation disk of the appropriate operating system. Possible Cause and Resolution: The smaller the value for the Maximum lifetime for user ticket Kerberos policy setting, the more likely it is that this error will occur. Because ticket renewal is automatic, you should not have to do anything if you get this message. To change the Maximum lifetime for user ticket setting: 1. Click Start, click All Programs, click Administrative Tools, and then click Domain Security Policy. 2. Click Accounts Policies, and then click Kerberos Policy. 3. Increase the value for Maximum lifetime for user ticket. 4. Run gpupdate /force on any client computer o |
| Reference Links | Troubleshooting Kerberos Errors |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.