Forums on Intune, SCCM, and Windows 11

Welcome to the forums. Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your topics and posts, as well as connect with other members through your own private inbox!

NEW WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered

Kyle Clifton

New Member
Messages
1
Reaction score
0
Points
0
Hello,
I have come to this error message after making multiple changes. First, I was unable to get services to work on SCCM, I found an article to change Log on As SQL Server (MSSQLSERVER) from network service to local system. Also, the SQL server agent was change as well. Once I received the issue with PXE, I thought I needed to change the Log on As to local system as well. Could changing the log on as settings cause this issue? Also, when I attempted to change it back to network service, it was unable to connect. The error in the title is from the log file while attempting to PXE a machine.

In the event logs on the server, there are also errors:

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server Computername$. The target name used was cifs/Computername. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (****.COM) is different from the client domain (*****.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.

Name resolution for the name dns.msftncsi.com timed out after none of the configured DNS servers responded.

On Date and time, component SMS_SRS_REPORTING_POINT on computer sccmdomain.COM reported: The report server service is not running on Reporting Service Point server "sccmdomain.com"; start the service to enable reporting.
 

Forum statistics

Threads
7,048
Messages
27,542
Members
17,754
Latest member
dkforeman
Back
Top