- Authorization of users in the domain may fail. It may also affect authorization in Active Directory Federation Services (ADFS).
- Group Managed Service Accounts (gMSA)used for services such as Internet Information Services (IIS Web Server)cannot be authenticated.
- Unable to connect to remote desktop using domain accounts.
- You may not have access to shared folders on workstations and file shares on servers.
- Printing that requires domain authorization may fail.
To verify that there is a problem, you need to open the Event Viewer on te domain controller. For some devices, a Microsoft-Windows-Kerberos-Key-Distribution-Center Event ID 14 error will be displayed with the following text:
While processing an AS request for target service, the account did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 1). The requested etypes: 18 3. The accounts available etypes: 23 18 17. Changing or resetting the password of will generate a proper key.
Microsoft engineers are working to fix the problem. A solution will be offered in the coming weeks.
Note that the problem does not affect home computers that are not part of a domain network.