Windows server 2012 R2

Hello guy's,

I have a windows server 2012 R2 running with 2 users and a admin so very simple.

with dhcp and dns,

I also use folder redirection but here are my problems there are 2 domain computers but sometimes if they login they get this error:

the system has detected an attempted breach of security. make sure you can connect to the server that verifies your account

can anyone please help me i tried almost every thing

thanks for the help


February 5th, 2015 2:30pm

(I can ping the server and if i fill in credentials it will work only de shortcuts on the bottom are gone)
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2015 2:34pm

Seems to be an issue with Kerberos authentication according to Microsoft

https://support.microsoft.com/kb/938457?wa=wsignin1.0

February 5th, 2015 3:30pm

You might want to try disabling all security software in use and try again. This is of course temporary and just for troubleshooting.
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2015 4:05pm

thanks for the help i opened port 88 on server and pc for udp and tcp with no result :(

February 5th, 2015 6:52pm

there is only basic security software on the pc (Windows defender)
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2015 6:56pm

  1. Confirm that the Primary DNS server that is configured on your client's IP address is the correct Domain Controller.
  2. Make sure the ports are properly configured. Note that for Kerberso you need both UDP and TCP

Here are the ports required for Client-DC communication:

Client Port(s) Server Port Service
49152 -65535/UDP 123/UDP W32Time
49152 -65535/TCP 135/TCP RPC Endpoint Mapper
49152 -65535/TCP 464/TCP/UDP Kerberos password change
49152 -65535/TCP 49152-65535/TCP RPC for LSA, SAM, Netlogon (*)
49152 -65535/TCP/UDP 389/TCP/UDP LDAP
49152 -65535/TCP 636/TCP LDAP SSL
49152 -65535/TCP 3268/TCP LDAP GC
49152 -65535/TCP 3269/TCP LDAP GC SSL
53, 49152 -65535/TCP/UDP 53/TCP/UDP DNS
49152 -65535/TCP 49152 -65535/TCP FRS RPC (*)
49152 -65535/TCP/UDP 88/TCP/UDP Kerberos
49152 -65535/TCP/UDP 445/TCP SMB
49152 -65535/TCP 49152-65535/TCP DFSR RPC (*)
February 6th, 2015 3:48pm

Thanks for the answer i will open all the listed ports and tell the result
Free Windows Admin Tool Kit Click here and download it now
February 6th, 2015 3:54pm

Thanks for the answer i will open all the listed ports and tell the result

As long as there are filtering there can be problems. That is why is suggested previously to temporary disable security software in use.

You can see here the list of ports: https://technet.microsoft.com/en-us/library/dd857231.aspx

February 6th, 2015 3:59pm

Hi halvebaardjes,

Is there any update

Best Regards,

Elton Ji

Free Windows Admin Tool Kit Click here and download it now
February 8th, 2015 1:38am

I had no time yet but i wil try it this afternoon
February 8th, 2015 6:39am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics