the error code was Event ID 4771. Kerberos pre-authentication failed 0x18 on their PCs. For this code, the issue is a bad password. However, for Event ID 4771, this can happen for several reasons:
Examples of 4771 Kerberos pre-authentication failed. Account Information: Security ID: ACME\administrator Account Name: Administrator Service Information: Service Name: krbtgt/acme Network Information: Client Address: ::ffff:10.42.42.224 Client Port: 50950 ...
Event ID 4768is logged only in domain controller for both success and failure instances. If the username and password are correct and the DC grants the TGT and logs theEvent ID 4768(authentication ticket granted). If the ticket request fails Windows will either log theevent 4768with failure...
Examples of 675 Pre-authentication failed: User Name: Fred User ID: MKTG\Fred Service Name: krbtgt/MKTG Pre-Authentication Type: 0x2 Failure Code: 24 Client Address: 10.42.42.10 Top 10 Windows Security Events to Monitor Free Tool for Windows Event Collection ...
Service ID: NULL SID MSDS-SupportedEncryptionTypes: Available Keys: Domain Controller Information: MSDS-SupportedEncryptionTypes: Available Keys: Network Information: Client Address: ::1 Client Port: 0 Advertized Etypes: Additional Information: Ticket Options: 0x40810010 Result Code: 0x12 Ticket Encrypt...