Recently, we got thousands of error message in the Security event log on the local DC. How to stop it?
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 5/20/2017 12:04:24 PM
Event ID: 4768
Task Category: Kerberos Authentication Service
Level: Information
Keywords: Audit Failure
User: N/A
Computer: DC1.domain.com
Description:
A Kerberos authentication ticket (TGT) was requested.
Account Information:
Account Name: name@domain.com
Supplied Realm Name: domain.com
User ID: NULL SID
Service Information:
Service Name: krbtgt/domain.com
Service ID: NULL SID
Network Information:
Client Address: ::ffff:10.0.35.69
Client Port: 53430
Additional Information:
Ticket Options: 0x40810010
Result Code: 0x6
Ticket Encryption Type: 0xFFFFFFFF
Pre-Authentication Type: -
Certificate Information:
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:
