Event ID 4768 RRS feed

  • Question

  • Recently, we got thousands of error message in the Security event log on the local DC. How to stop it?

    Log Name:      Security

    Source:        Microsoft-Windows-Security-Auditing

    Date:          5/20/2017 12:04:24 PM

    Event ID:      4768

    Task Category: Kerberos Authentication Service

    Level:         Information

    Keywords:      Audit Failure

    User:          N/A

    Computer:      DC1.domain.com


    A Kerberos authentication ticket (TGT) was requested.

    Account Information:

    Account Name: name@domain.com

    Supplied Realm Name: domain.com

    User ID: NULL SID

    Service Information:

    Service Name: krbtgt/domain.com

    Service ID: NULL SID

    Network Information:

    Client Address: ::ffff:

    Client Port: 53430

    Additional Information:

    Ticket Options: 0x40810010

    Result Code: 0x6

    Ticket Encryption Type: 0xFFFFFFFF

    Pre-Authentication Type: -

    Certificate Information:

    Certificate Issuer Name: 

    Certificate Serial Number: 

    Certificate Thumbprint:

    • Edited by illa_jk Tuesday, May 30, 2017 12:54 AM
    Tuesday, May 30, 2017 12:52 AM


All replies