My company has plan E3 but I am not using AD federation. All users have separate AD accounts and O365 accounts.
On both of my Win2k3 domain controllers, I have hundreds of security Failure Audits of Event ID 672. In the Event Details the User Name is the email address for the O365 user account and the Supplied Realm Name is the domain name of the AD forest. The result code is 0x6 which indicates "Client not found in Kerberos database."
This failure does not *seem* to be causing any problems or preventing functionality but I calculate that I should not be receiving this if everything were running ok.
Any ideas on how to clear up this issue?
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 672
Date: 11/13/2012
Time: 4:53:19 PM
User: NT AUTHORITY\SYSTEM
Computer: SUPPORT
Description:
Authentication Ticket Request:
User Name: office365_username@emaildomain.com
Supplied Realm Name: ADdomain.US
User ID: -
Service Name: krbtgt/ADdomain.US
Service ID: -
Ticket Options: 0x40810010
Result Code: 0x6
Ticket Encryption Type: -
Pre-Authentication Type: -
Client Address: 192.168.1.10
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint: