The kpasswd protocol fails with a KDC_ERR_S_PRINCIPAL_UNKNOWN error after you perform an authoritative restore on the krbtgt account in a Windows Server 2008 domain

Article translations Article translations
Article ID: 968140 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

You perform an authoritative restore on the krbtgt account in a Windows Server 2008 domain. After you do this, the kpasswd protocol fails with a KDC_ERR_S_PRINCIPAL_UNKNOWN error.

This prevents you from joining UNIX-based computers to your Windows Server 2008 domain. Additionally, this blocks kpasswd interoperability between the Windows Server 2008 domain and an MIT realm. For example, you cannot change passwords by using the kpasswd command.

RESOLUTION

Hotfix information

Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

No prerequisites are required for Windows Server 2008-based computers.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The Global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table.

Windows Vista and Windows Server 2008 file information notes

  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
    Collapse this tableExpand this table
    VersionProductSR_LevelService branch
    6.0.6000.16xxxWindows VistaRTMGDR
    6.0.6000.20xxxWindows VistaRTMLDR
    6.0.6001.18xxxWindows Vista and Windows Server 2008SP1GDR
    6.0.6001.22xxxWindows Vista and Windows Server 2008SP1LDR
    6.0.6002.18xxxWindows Vista and Windows Server 2008SP2GDR
    6.0.6002.22xxxWindows Vista and Windows Server 2008SP2LDR
  • Service Pack 1 is integrated into the original release of Windows Server 2008.
  • The MANIFEST files (.manifest) and MUM files (.mum) installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.
The Global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Kdcsvc.dll6.0.6001.22424311,29601-May-200914:24x86
Kdcsvc.mofNot Applicable5,30001-Apr-200919:14Not Applicable
Kdcsvc.dll6.0.6002.22127311,29601-May-200914:19x86
Kdcsvc.mofNot Applicable5,30003-Apr-200921:47Not Applicable
For all supported x64-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Kdcsvc.dll6.0.6001.22424404,48001-May-200914:47x64
Kdcsvc.mofNot Applicable5,30001-Apr-200916:43Not Applicable
Kdcsvc.dll6.0.6002.22127404,48001-May-200914:19x64
Kdcsvc.mofNot Applicable5,30003-Apr-200921:07Not Applicable

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information for Windows Server 2008

Additional files for all supported x86-based versions of Windows Server 2008

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Package_for_kb968140_sc_0~31bf3856ad364e35~x86~~6.0.1.0.mumNot Applicable1,43004-May-200905:31Not Applicable
Package_for_kb968140_sc_1~31bf3856ad364e35~x86~~6.0.1.0.mumNot Applicable1,52704-May-200905:31Not Applicable
Package_for_kb968140_sc~31bf3856ad364e35~x86~~6.0.1.0.mumNot Applicable1,70104-May-200905:31Not Applicable
Package_for_kb968140_server_0~31bf3856ad364e35~x86~~6.0.1.0.mumNot Applicable1,42704-May-200905:31Not Applicable
Package_for_kb968140_server_1~31bf3856ad364e35~x86~~6.0.1.0.mumNot Applicable1,53104-May-200905:31Not Applicable
Package_for_kb968140_server~31bf3856ad364e35~x86~~6.0.1.0.mumNot Applicable1,71204-May-200905:31Not Applicable
X86_microsoft-windows-k..distribution-center_31bf3856ad364e35_6.0.6001.22424_none_8c2fcc1dad6b1769.manifestNot Applicable42,27601-May-200915:57Not Applicable
X86_microsoft-windows-k..distribution-center_31bf3856ad364e35_6.0.6002.22127_none_8e193ee3aa8eb892.manifestNot Applicable42,27601-May-200915:50Not Applicable

Additional files for all supported x64-based versions of Windows Server 2008

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Amd64_microsoft-windows-k..distribution-center_31bf3856ad364e35_6.0.6001.22424_none_e84e67a165c8889f.manifestNot Applicable42,32001-May-200916:42Not Applicable
Amd64_microsoft-windows-k..distribution-center_31bf3856ad364e35_6.0.6002.22127_none_ea37da6762ec29c8.manifestNot Applicable42,32001-May-200915:27Not Applicable
Package_for_kb968140_sc_0~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,43804-May-200905:31Not Applicable
Package_for_kb968140_sc_1~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,53704-May-200905:31Not Applicable
Package_for_kb968140_sc~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,71104-May-200905:31Not Applicable
Package_for_kb968140_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,43504-May-200905:31Not Applicable
Package_for_kb968140_server_1~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,54104-May-200905:31Not Applicable
Package_for_kb968140_server~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,72204-May-200905:31Not Applicable

Properties

Article ID: 968140 - Last Review: October 7, 2011 - Revision: 2.0
APPLIES TO
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 Standard without Hyper-V
Keywords: 
kbautohotfix kbexpertiseinter kbsurveynew kbbug kbfix kbqfe KB968140

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com