Kerberos TGT (4768) granted while logon fails 4625

Copper Contributor

Hi, needs some guidance. Have a svc account where the logon fails with a 4625 :

 

Failure Reason: The user has not been granted the requested logon type at this machine.
Status: 0xC000015B
Sub Status: 0x0

 

The sub-status says OK?!!?

 

Also, the 4768 (TGT) is granted! 

"Additional Information:
Ticket Options: 0x40810010
Result Code: 0x0
'If TGT issue fails then you will see Failure event with Result Code field not equal to “0x0”'
Ticket Encryption Type: 0x12
Pre-Authentication Type: 2"

 

can someone please lift the fog of confusion?

 

How can a service account get a tgt (and a tgs) when the login is declined?

 

Thank you

 

0 Replies