Event ID 4768 with error "0x6"

Alaa Elrayes 11 Reputation points
2022-11-24T08:59:45.66+00:00

Hi Team,

I have noticed a thousands of audit logs failure with Event ID:4768 with error "0x6" and username Host coming from our exchange servers to domain controllers:

A Kerberos authentication ticket (TGT) was requested.

Account Information:
Account Name: host
Supplied Realm Name: our domain
User ID: NULL SID

Service Information:
Service Name: krbtgt/our domain
Service ID: NULL SID

Network Information:
Client Address: ::ffff:( the IP of the exchange)
Client Port: 40486

Additional Information:
Ticket Options: 0x40810010
Result Code: 0x6
Ticket Encryption Type: 0xFFFFFFFF
Pre-Authentication Type: -

Certificate Information:
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:

Certificate information is only provided if a certificate was used for pre-authentication.

Pre-authentication types, ticket options, encryption types and result codes are defined in RFC 4120.

Note that we have exchange 2019 CU12

What cause this failure ?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,122 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,348 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,720 questions
Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
513 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alaa Elrayes 11 Reputation points
    2022-11-27T08:12:22.813+00:00

    Hi @Aholic Liang-MSFT

    I can't confirm on your wondering but what are the updates of May and June cause that issue to check if those installed or not ?

    Thanks.

  2. Alaa Elrayes 11 Reputation points
    2022-11-29T07:41:23.4+00:00

    Any answer here ?