Kerberos Issues

[Guest josephr38@hotmail.com]

We have 4 Windows 2003 DCs in our office, all of which are also Global

Catalogs (GC). We are seeing in event viewer multiple Kerberos errors: 0xd

KDC_ERR_BADOPTION and 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN.

 

Initially, we thought that the GC or AD was not replicating correctly

because every server was a GC - after reading a Microsoft article that seemed

to suggest that having every DC in one domain a GC would inhibit replication.

GC was removed from one DC, and the 0x7 errors disappeared on that DC;

however, the began again this morning.

 

So, it is starting to sound like more of an AD issue than a GC issue. The

other point is that apresent we do not have any Win2K DCs on the domain, but

we are running the Domain Functional Level at Windows 2k native and the

Forest Functional Level at W2k.

 

Does anyone have any advise for how we can successfully resolve these 2

Kerberos issues? We have to this point received unsatisfactory advice from

MS.

 

Regards,

Joseph