Event ID: 4821A Kerberos service ticket was denied because the user, device, or both does not meet the access control restrictions
A Kerberos service ticket was denied because the user, device, or both does not meet the access control restrictions. Account Information: Account Name: %1 Account Domain: %2 Logon GUID: %11 Authentication Policy Information: Silo Name: %13 Policy Name: %14 Device Information: Device Name: %3 Service Information: Service Name: %4 Service ID: %5 Network Information: Client Address: %8 Client Port: %9 Additional Information: Ticket Options: %6 Ticket Encryption Type: %7 Failure Code: %10 Transited Services: %12 This event is generated every time access is requested to a resource such as a computer or a Windows service. The service name indicates the resource to which access was requested.
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Kerberos Service Ticket Operations"
LEFT/RIGHT arrow keys for navigationBack to List