We are using Windows 2003 Std server SP2, it is our DC. In Event Viewer under system I found the following Error, Event ID: 27 Source: KDC While processing a TGS request for the target server krbtgt/domain, the account username @Domain did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18. The accounts available etypes were 23 -133 -128 3 1.

The cause of the event is that the client requests a service ticket with a etype 18 (aes256-cts-hmac-sha1-96), which is not supported by Windows Server 2003 but supported by Windows Server 2008 R2. If the Kerberos authentication works properly, you can safely ignore the events. It just informs the clients what etypes it supports. Regards Milos

Thanks Milos for the reply, we do have a 2003 and 2008 R2 DC's, I remember this error started after installing the 2008 R2 but is there any fix with which we can stop this errors.

Hello, Actually, those links to view klist type, extensions and it won't solve the issue. Anyone knows how to remove the error id 27? Please help.

How did you resolved the issue? Eevent ID: 27 while processing a TGS request for the target server krbtgt, the account did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18. The accounts available etypes were 23 -133 -128 3 1.