WIndows 7 and Windows 2008 authentication failed in Windows 2003 Domain

Question

Hi,
We have Domain with Windows 2003 and recently Windows 2008 Doamin controllers also added.
We are facing authentication failure for Windows 7 and Windows 2008 Domain members when user is trying to login.
Schema Master is on Windows 2003 and remaining roles on Windows 2008 Domain controller.
Windows XP clients login is working fine.
Problem si for Windows 7 and Windows 2008 Domain members login.
Any hint/solution will be really great help.
Pls share if you have any solutions.
Regards:Mahesh

Answer 1

Hi,
I found some more details about issue
Below are the events getting generated. It looks like due to encryption mismatch with Windows 2003 Domain and Windows7 and Windows 2008 clients. However i am looking for solution if someone tested this case.
Event Type:        Error
Event Source:    KDC
Event Category:                None
Event ID:              26
Date:                     08/06/2014
Time:                     9:41:04 AM
User:                     N/A
Computer:          AAAAAA
Description:
While processing an AS request for target service krbtgt, the account ADDADA$ did not  have a suitable key for generating a Kerberos ticket (the missing key has an ID of 2). The requested etypes were 17.  The accounts
available etypes were 23  -133  -128  3  -140.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type:        Error
Event Source:    Kerberos
Event Category:                None
Event ID:              4
Date:                     08/06/2014
Time:                     9:34:17 AM
User:                     N/A
Computer:          AAAAAA
Description:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server ADADDFHDHDH$.  The target name used was . This indicates that the password used to encrypt the kerberos service ticket is different than that on the
target server. Commonly, this is due to identically named  machine accounts in the target realm (DOMAINNAME.COM), and the client realm.   Please contact your system administrator.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Regards:Mahesh