SYMPTOMS
A client may send a domain controller two unnecessary
Kerberos "Ticket-Granting Server" requests. This behavior occurs when, under
certain situations, the response from a domain controller to a "Ticket-Granting
Server" request from a client may indicate an error, such as the following (
the error can only be seen from the network trace):
Server
account not found
The client may then send two more "Ticket-Granting
Server" requests, and the domain controller then generates two more responses.
Those two extra requests are not necessary.
RESOLUTION
Service Pack Information
To resolve this problem, obtain the latest service pack for Microsoft Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
Hotfix Information
A supported fix is now available
from Microsoft, but it is only intended to correct the problem that is
described in this article. Apply it only to computers that are experiencing
this specific problem. This fix may receive additional testing. Therefore, if
you are not severely affected by this problem, Microsoft recommends that you
wait for the next Windows 2000 service pack that contains this hotfix.
To
resolve this problem immediately, contact Microsoft Product Support Services to
obtain the fix. For a complete list of Microsoft Product Support Services phone
numbers and information about support costs, visit the following Microsoft Web
site:
NOTE: In special cases, charges that are ordinarily incurred for
support calls may be canceled if a Microsoft Support Professional determines
that a specific update will resolve your problem. The typical support costs
will apply to additional support questions and issues that do not qualify for
the specific update in question.
The English version of
this fix has the file attributes (or later) that are listed in the following
table. The dates and times for these files are listed in coordinated universal
time (UTC). When you view the file information, it is converted to local time.
To find the difference between UTC and local time, use the
Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
------------------------------------------------------
01-Nov-02 11:49 5.0.2195.6109 124,688 Adsldp.dll
01-Nov-02 11:49 5.0.2195.5781 131,344 Adsldpc.dll
01-Nov-02 11:49 5.0.2195.6109 62,736 Adsmsext.dll
01-Nov-02 11:49 5.0.2195.6052 358,160 Advapi32.dll
01-Nov-02 11:49 5.0.2195.6094 49,936 Browser.dll
01-Nov-02 11:49 5.0.2195.6012 135,952 Dnsapi.dll
01-Nov-02 11:49 5.0.2195.6076 96,016 Dnsrslvr.dll
01-Nov-02 11:49 5.0.2195.5722 45,328 Eventlog.dll
01-Nov-02 11:49 5.0.2195.6059 146,704 Kdcsvc.dll
01-Nov-02 10:52 5.0.2195.6112 204,048 Kerberos.dll
21-Aug-02 08:27 5.0.2195.6023 71,248 Ksecdd.sys
01-Nov-02 11:45 5.0.2195.6112 507,152 Lsasrv.dll
01-Nov-02 11:45 5.0.2195.6112 33,552 Lsass.exe
27-Aug-02 14:53 5.0.2195.6034 108,816 Msv1_0.dll
01-Nov-02 11:49 5.0.2195.5979 307,472 Netapi32.dll
01-Nov-02 11:49 5.0.2195.6075 360,720 Netlogon.dll
01-Nov-02 11:49 5.0.2195.6100 920,848 Ntdsa.dll
01-Nov-02 11:49 5.0.2195.6100 389,392 Samsrv.dll
01-Nov-02 11:49 5.0.2195.6100 130,320 Scecli.dll
01-Nov-02 11:49 5.0.2195.6100 303,376 Scesrv.dll
01-Nov-02 11:49 5.0.2195.5859 48,912 W32time.dll
04-Jun-02 13:32 5.0.2195.5859 57,104 W32tm.exe
01-Nov-02 11:49 5.0.2195.6100 126,224 Wldap32.dll