Windows 10: Kerberos pre-authentication failed after changing domain administrator password

Repeated event generation of Kerberos pre-authentication failed with event ID 4771 and failure code 0x18 and the event is generating from multiple instances targeting event source to domain controller.The issue occurred after change the domain administrator password and unable to dig insides to find the root cause of generation. As since we already update the scheduler service in all member servers. " Kerberos pre-authentication failed. Account Information: Security ID: S-1-5-21-16834707280-224241925-162353504729-500 Account Name: Administrator Service Information: Service Name: krbtgt/veeam

:)

 

Error Kerberos Pre-Authentication failed on Windows 10 Domain computer

Afternoon,

We are having issues with a Windows 10 domain joined machine throwing up Kerberos pre-authentication failures every 15 mins or so, so after a few instances this causes the account to become locked out (the source IP of each event is the device itself)

The user's machine is a Surface Pro, we have tried clearing Windows cached credentials, resetting profile, had a scan of the machine and can't see any mapped drives etc which may be causing the issue.

I have partially got around this by disabling pre-authentication for the user via the AD, although not comfortable using this as a resolution as i'm guessing this is a slight security risk.

***Modified title from: Windows 10 Kerberos pre-authentication failed***

 

Kerberos Pre-Authentication error

I have a Windows 10 domain joined machine that keeps
throwing up Kerberos pre-authentication every 20 minutes. It is a Surface Pro machine, I tried to clear Windows cashed credentials, then I scanned the computer. I managed to
disable pre-authentication for the user via the AD. But I wouldn’t like to use
this as a resolution as I think there is a security risk

 

Error Kerberos Pre-Authentication failed on Windows 10 Domain computer

Hi,

Thank you for writing to Microsoft Community Forums.

Since you have mentioned that you are facing this issue with a specific user account, I suggest you to login with the same user account on any other computer connected to the same Domain and check if you get the same error.

You can also refer the article
4771(F): Kerberos pre-authentication failed for additional information on this error message.

However, since the computer is joined to a domain network, you can post your query in

TechNet forums, where we have support professionals who are well equipped with the knowledge on issues with Domain computers.

Hope it helps.

Nikhar Khare

Microsoft Community - Moderator