Windows Server 2003 과 Windows Server 2012 R2 도메인 컨트롤러가 혼합되어 있는 환경에서 도메인 로그인이 안 되는 문제
?????. ?? ??????? ??? ????? ??? ???.
??? ????? Windows Server 2003 ?? Windows Server 2012 R2 ? ????? ? ??? ?? ?? ?? ??? ?? ????? ?? ??? ???? ??? ? ??? ??? ?????? ???? ? ?? ??? ?? ?? ????.
[?? ??]
1. ??? ?? ?? / ??????? ??? ??? ??? ??? ?? ???? ?? ???.
Event ID: 4
Source: Kerberos
Type: Error
"The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/myserver.domain.com. This indicates that the password used to encrypt the Kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (domain.com), and the client realm. Please contact your system administrator."
2. ??? ???? ??? ? ??? ?? ?? ???? ?? ??? ???? ?? ????.
3. ?? ???? ???? ???? ???? ? ?? ?? ???? ?? ???.
[?? ??]
Windows Server 2008 R2 / Windows 7 ?? DES-CBC-MD5 ? DES-CBC-CRC ???? ???? ?? AES256-CTS-HMAC-SHA1-96, AES128-CTS-HMAC-SHA1-96, RC4-HMAC ????? ???? ???.
??? AD ??? Windows Server 2012 R2?? Domain Member ? Windows Server 2008 / Windows Server 2008 R2 / Windows Server 2012 / Windows Server 2012 R2 ?? Windows Vista / Windows 7 / Windows 8 / Windows 8.1 ? ?? ??? ??? ?? ?? ?? ?? AES ? ??? ???? ?? ?? ??? ?? ??? ?????.
Changes in Kerberos Authentication
https://technet.microsoft.com/en-us/library/dd560670(v=WS.10).aspx
[?? ??]
1. ??? ????? ?? hotfix ? ?? ???.
Can't log on after changing machine account password in mixed Windows Server 2012 R2 and Windows Server 2003 environment
https://support.microsoft.com/kb/2989971
2. KB2989971? 2014? 9? ???? ??? ?? ?? ????.
9? ???? ??? ?? ?? ?? KB2989971 ? ?? ???.
Windows RT 8.1, 8.1 Windows ? Windows Server 2012 R2 2014 ? 9 ? ???? ??
https://support.microsoft.com/kb/2984006
[?? ??]
It turns out that weird things can happen when you mix Windows Server 2003 and Windows Server 2012 R2 domain controllers
?????.