+13Everyone else's Kerberos work, except this one user, which now can only authenticate via NTLM and becomes anonymous user.
His old PC name: XYZ_OLD
He got a new PC last week with name XYZ_NEW (Kerberos works) last Thursday.
HelpDesk renamed his PC from XYZ_NEW to XYZ_OLD on Friday and now Kerberos no longer works.
I checked IE and Automatic Integrated Logon is specified. We also used KerbTray.exe to purge the tickets, and nothing stands out in the client and server's Event Log.
Any ideas?
+4Is the (first) server registered in Local Intranet Zone in Internet Explorer?
Another tip is to delete saved credentials. I don't have a XP/Vista machine in front of me, but in Windows 7 it's called "Manage windows credentials" in Control Panel. Look for "Password" or "User" or something similar in this users Control Panel.
Good luck!
+9+9Interestingly, I just helped a customer with a similar issue.
It was related to the client machine using cached credentials when authenticating to the server.
A reboot of the machine showed that the user account password was locked out.
I also found an interesting tool that allows you to remove cached user credentials.
Run this command to launch it.
rundll32.exe keymgr.dll, KRShowKeyMgr
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
