Windows 10: Kerberos pre-authentication failed.

Kerberos pre-authentication failed.Account Information: Security ID: NIACL\33338 Account Name: 33338Service Information: Service Name: krbtgt/NIACL.CO.INNetwork Information: Client Address: ::ffff:10.54.1.188 Client Port: 50207Additional Information: Ticket Options: 0x40810010 Failure Code: 0x12 Pre-Authentication Type: 0Certificate Information: Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: Certificate information is only provide

:)

 

Multiple failed login request Kerberos pre-authentication failed.

Event ID: 4771





Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 16-02-2023 14:37:05

Event ID: 4771

Task Category: Kerberos Authentication Service

Level: Information

Keywords: Audit Failure

User: N/A

Computer: NIAMUMPDC1.NIACL.CO.IN

Description:

Kerberos pre-authentication failed.



Account Information:

Security ID: NIACL\24290

Account Name: 24290



Service Information:

Service Name: krbtgt/NIACL.CO.IN



Network Information:

Client Address: ::ffff:10.115.44.52

Client Port: 51947



Additional Information:

Ticket Options: 0x40810010

Failure Code: 0x12

Pre-Authentication Type: 0



Certificate Information:

Certificate Issuer Name:

Certificate Serial Number:

Certificate Thumbprint:



Certificate information is only provided if a certificate was used for pre-authentication.



Pre-authentication types, ticket options and failure codes are defined in RFC 4120.



If the ticket was malformed or damaged during transit and could not be decrypted, then many fields in this event might not be present.

 

Kerberos Pre-Authentication error

I have a Windows 10 domain joined machine that keeps
throwing up Kerberos pre-authentication every 20 minutes. It is a Surface Pro machine, I tried to clear Windows cashed credentials, then I scanned the computer. I managed to
disable pre-authentication for the user via the AD. But I wouldn’t like to use
this as a resolution as I think there is a security risk

 

Error Kerberos Pre-Authentication failed on Windows 10 Domain computer

Afternoon,

We are having issues with a Windows 10 domain joined machine throwing up Kerberos pre-authentication failures every 15 mins or so, so after a few instances this causes the account to become locked out (the source IP of each event is the device itself)

The user's machine is a Surface Pro, we have tried clearing Windows cached credentials, resetting profile, had a scan of the machine and can't see any mapped drives etc which may be causing the issue.

I have partially got around this by disabling pre-authentication for the user via the AD, although not comfortable using this as a resolution as i'm guessing this is a slight security risk.

***Modified title from: Windows 10 Kerberos pre-authentication failed***