Hi all,
I am receiving the Security-Kerberos Event ID 4 error on both servers in my domain(SBS2011 and 2008r2)
The unusual thing is the error contains two client machines
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server INTERNAL_MACHINE$. The target name used was RPCSS/VPN_CONNECTED_MACHINE.
INTERNAL MACHINE is somebody's laptop, it is NOT a server
VPN CONNECTED MACHINE is somebody who spends 99% of the time offsite and is basically on the VPN all day.
Both machines are connected to the same domain. both machines are actively used
I have got no idea where to start, I am relatively new to the industry and don't have a lot of idea in this area or RPCSS.
If someone could point me in a direction that would be great.
Thanks,
Matt