Ask Your Question

Revision history [back]

Kerberos not working, NTLM working since upgrading domain from 2008R2 to 2019.

Hello,

We have upgraded our two active directories from 2008 R2 to 2019 this week.

As soon as we have upgraded them, we had a lot of computers who were no longer able to access to our 3 remaining windows 2003 servers shared folders.

I've unchecked the feature "Automatically supress SMB 1.0/CIFS" without any success on many computers.

I've tried enabling all encryption types allowed for Kerberos.

All computers can access the servers by ip address but using hostname with Kerberos just blocks.

I've tried checking wireshark packets, I only see RST, ACK packets, trying 3 times before stop attempting. My network skills just stops there : https://drive.google.com/file/d/1vVPA1bpneWtf1nyD8WbOHdRFxR-pIn-k/view?usp=sharing

Does anyone have any idea on what would block the kerberos protocol ? Thanks