Ports required for Kerberos authentication are blocked. Kerberos authentication is required to authenticate clients using Kerberos proxy on this server. \
For clients to communicate with the proxy, firewalls must allow HTTPS traffic (port 443 by default). The Kerberos proxy must be able to send Kerberos authentication protocol traffic via port 88, and Kerberos change password protocol traffic via port 464 to domain controllers.
Ports required for Kerberos authentication are blocked. Kerberos authentication is required to authenticate clients using Kerberos proxy on this server. For clients to communicate with the proxy, firewalls must allow HTTPS traffic (port 443 by default). The Kerberos proxy must be able to send Kerberos authentication protocol traffic via port 88, and Kerberos change password protocol traffic via port 464 to domain controllers.
1. Port 443 or the HTTPS protocol is blocked on the Remote Access server.
2. Port 88 or 464 is blocked on the Remote Access server.
1. Ensure that port 443 and the HTTPS protocol are not blocked.
2. Ensure that Port 88 and port 464 is not blocked on the Remote Access server, or on domain controllers.
| Target | Microsoft.Windows.RemoteAccess.DirectAccessServer.Class | ||
| Parent Monitor | System.Health.AvailabilityState | ||
| Category | Custom | ||
| Enabled | True | ||
| Alert Generate | True | ||
| Alert Severity | Error | ||
| Alert Priority | Normal | ||
| Alert Auto Resolve | True | ||
| Monitor Type | Microsoft.Windows.RemoteAccess.Monitor.Heuristic.MonitorType | ||
| Remotable | True | ||
| Accessibility | Public | ||
| Alert Message |
| ||
| RunAs | Default |
Home