General discussion


Kerberos Dist Ctr Serv disables itself

By Thomas.Fauth ·
Kerberos Distribution Center Service is changing it's startup type to disabled and the service is stopping on all of my domain controllers. How can I stop the KDC Service from stopping and disabling itself sporadically. Why is it disabling itself on startup and not starting on startup. What causes it to stop in the middle of the day with no explanation in the logs?

Has anybody seen this before or do you have any hints at tracking down when services start and stop. I can't find any auditing on services and nothing is being recorded in the logs. Additionally, Kerberos logging doesn't display the services--only the Kerberos ticket information. Help!!!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to Kerberos Dist Ctr Serv di ...

Who else has access to this domain controller to change the settings on the service?

One other potential is if you have applied a security template in Group Policy which is setting the service to disabled.

Still another I have thought of is a number of 677 errors due to non-secure DNS updates being sent to the DC and it will only accept secure updates.

I would recommend that you run DCDIAG (available here: with the options:

dcdiag /v /e /f:dcdiagLOG.txt /ferr:dcdiagERROR.txt

What service packs, hot fixes, other services are running on this domain controller?

Collapse -

by Thomas.Fauth In reply to

Thanks for the input. The dcdiag is a good tool. Digging around in AD, I found that a new GPO had been applied that did more than the individual who applied it intended. One such thing was disabling of important domain controller services.

Collapse -

by Thomas.Fauth In reply to Kerberos Dist Ctr Serv di ...

This question was closed by the author

Related Discussions

Related Forums