KRBTGT hesap parolasını değiştirmeye çalışan kullanıcı veya işlemin yeterli ayrıcalığı yok. Bu işlem bu hesap için Parolayı Değiştirme hakları gerektiriyor.
İsteği Yönetici kimlik bilgileri ile yeniden deneyin.
Daha fazla bilgi için, bkz.
Target | Microsoft.Windows.Server.2012.AD.DomainControllerRole |
Category | EventCollection |
Enabled | True |
Event_ID | 10 |
Event Source | Microsoft-Windows-Kerberos-Key-Distribution-Center |
Alert Generate | False |
Remotable | True |
Event Log | System |
Comment | Mom2005ID='{FCD43E2D-7432-428D-8C94-180175C38FCF}';MOM2005GroupID= |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
CollectEventData | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
CollectEventDataWarehouse | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
<Rule ID="Change_Password_on_KRBTGT_Account_Failed_5_Rule" Comment="Mom2005ID='{FCD43E2D-7432-428D-8C94-180175C38FCF}';MOM2005GroupID=" Enabled="true" Target="AD2012Core!Microsoft.Windows.Server.2012.AD.DomainControllerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>10</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Microsoft-Windows-Kerberos-Key-Distribution-Center</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="CollectEventData" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>