Domain Controller Contains Invalid Tickets in the Ticket Cache

View products that this article applies to.

This article was previously published under Q269731

Expand all | Collapse all

SYMPTOMS

If a Windows 2000-based domain controller has its time set ahead of other domain controllers on the network and grants itself Service tickets or Ticket Granting Ticket tickets, other global catalog servers or time servers may return the following message:

The Ticket is not yet Valid

This issue can also cause these domain controllers to stop authenticating users.

Back to the top

CAUSE

Tickets are stored in the ticket cache on the domain controller. If these tickets have their time set ahead of the other domain controllers, this problem can occur.

Back to the top

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 (http://support.microsoft.com/kb/260910/EN-US/ ) How to Obtain the Latest Windows 2000 Service Pack

The English version of this fix should have the following file attributes or later:

   Date        Time     Size    File name
   -----------------------------------------
   01/25/2001  06:24p  130,320  Adsldpc.dll
   01/25/2001  06:24p  348,944  Advapi32.dll
   01/25/2001  06:23p  502,032  Instlsa5.dll
   01/25/2001  06:24p  140,560  Kdcsvc.dll
   01/17/2001  05:17p  198,928  Kerberos.dll
   12/20/2000  01:13a   69,456  Ksecdd.sys
   01/25/2001  06:24p  484,112  Lsasrv.dll
   01/02/2001  12:45p   33,552  Lsass.exe
   01/23/2001  09:06p  108,816  Msv1_0.dll
   01/25/2001  06:24p  912,656  Ntdsa.dll
   01/25/2001  06:24p  363,280  Samsrv.dll
   01/25/2001  06:24p  128,272  Wldap32.dll

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 2.

Back to the top

MORE INFORMATION

For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:

249149 (http://support.microsoft.com/kb/249149/EN-US/ ) Installing Microsoft Windows 2000 and Windows 2000 Hotfixes

Back to the top