Verifying Computer Settings for Troubleshooting Kerberos
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
Before you begin troubleshooting, verify that your computer is configured properly and that the Kerberos authentication infrastructure is set up and running properly.
Settings to Verify Before You Troubleshoot
Verify all of the following items:
Make sure you have administrative rights on the computer you are troubleshooting.
Install all critical updates and security updates for Windows Server 2003.
Update all of your software, including non-Microsoft software.
Restart the computer if you are running a server operating system.
Make sure that required services and server are available.
Make sure that the clocks are synchronized across the domain.
Make sure you have administrative rights on the computer you are troubleshooting.
You cannot modify Kerberos-related settings unless you are a member of the Administrators group on the computer that you are administering.
To verify that you are a member of the Administrators group
Open the Computer Management snap-in.
In the console tree, double-click Local Users and Groups, and then click Groups.
In the details pane, double-click Administrators and verify that your account name or a group to which your account is a member appears in the Members list.
Install all critical updates and security updates for Windows Server 2003.
Some updates might be required for the Kerberos protocol to function properly.
To verify that you have all critical updates and security patches
- Click Start, click Windows Update, and then follow the instructions that appear on your screen.
Update all of your software, including non-Microsoft software.
The Kerberos protocol might not function properly with some programs unless you update the programs with the most recent service pack or software update.
Restart the computer if you are running a server operating system.
If you are running any Windows Server 2003 operating system, and you have made configuration changes that affect Kerberos authentication, you need to restart your computer.
Make sure that required services and servers are available.
The Kerberos authentication protocol requires a functioning domain controller, Domain Name System (DNS) infrastructure, and network in order to work properly. Verify that you can access these resources before you begin troubleshooting the Kerberos protocol.
Make sure that the clocks are synchronized across the domain.
Many network services, including Kerberos authentication are dependant on time synchronization throughout the domain. You can manually synchronize a computer with the time on the domain.
To synchronize the computer's time with the current time on the domain
Click Start, and then click Run.
Type net time /domain /set, and then click OK.