Windows Vista/2008 加入Windows 2003 網域後.Windows 2003 DC上出現稽核失敗事件ID 675

  • Article

Error Screenshot:

image

解決方法:

Because of design change pre-authentication is not forced on Vista and Windows 2008 machines.
We can force pre-authentication on Windows Vista machines using following registry value:
HKLM\System\CurrentControlSet\Control\LSA\Kerberos\Parameters
Value Name = DefaultEncryptionType
Type = Reg_DWORD
Value Data = 0x17(23)

After you add this registry, please reboot the system and logon again