Event ID: 4776

• Occurs when the key distribution centre fails to issue a Kerberos ticket granting ticket.

• Only DCs get this event.

• Could be caused by:

  • DC does not have a certificate for smart card authentication installed.

  • The users password has expired

  • the user has provided an incorrect password.

• Check for result codes if the authentication fails.

  • 0x18 - pre-authentication information was invalid.

  • 0x12 - client's credentials have been revoked (account might be disabled, expired or locked)