Event ID: 11 Event source: KDC

[manso]

Hi,

We receive the following in the eventlog on our W2K DC:

Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 11
Date: 2005-04-04
Time: 18:09:46
User: N/A
Computer: computername
Description:
There are multiple accounts with name cifs/computername.domain.net of type
10.

"computername" is a Windows 2003 server. We have removed it from Computers
in AD MMC console, reinstalled the machine and re joined the domain. The
message is still popping up. I have tried ADSIEdit and followed the
instructions on

http://www.winserverkb.com/Uwe/Forum.aspx/windows-2000-active-directory/15706/Error-11-KDC

"servicePrincipalName" looks exacly the same as on a machine without the
problem. Most articles about this problem refers to host/computername but we
get cifs/computername. What is cifs? Are we looking at the wrong place?

Any and all help is appreciated.

Thanks,

Manso

 

[Andrei Ungureanu]

http://www.eventid.net/display.asp?eventid=11&eventno=569&source=KDC&phase=1

 

[manso]

Thanks but I have tried the suggestions on eventid.net and I can't workout
where the duplicate record is. Most articles/postings suggest that this
error will go away when removing/rejoining the domain but the error
persists. Any clues?

Thanks,
Manso

 

[Ryan Hanisco]

And you're deleting the computer account before re-joining?

 

[manso]

Hi Ryan,

I remove the computer from AD using the MMC console, reinstall the machine
and join the domain again during the reinstallation.

Thanks,
Manso

 

[Chriss3 [MVP]]

You have to find the duplication, the service principal name is used on
another object.

Use method 2 in the KB
http://support.microsoft.com/default.aspx?scid=kb;en-us;321044 to find the
two conflicting objects.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup