Friday, July 20, 2007

Getting lots of Kerberos errors?

When you look at the SBS Monitoring logs everyday do you see lots and lots ( I mean  thousands ) of errors coming from workstations? When you look at the workstation even logs you see Kerberos and DCOM errors.
 
We have found that these generally relate to printer status monitors that reside on the workstation (or server). We especially see this with the HP toolbox printer software that is loaded during the complete printer driver installation of HP Printers.
 
Do you need these printer monitor programs. No we believe not so if you don't need them then they should be removed to prevent all the Kerberos errors. You can uninstall and reinstall the printer drivers but take a look in :
 
HKLM\Software\Microsoft\Windows\currentversion\run
 
and for HP printers remove the following startup entries :
 
StatusClient 2.6 REG_SZ
c:\program files\Hewlett-Packard\toolbox\statusclient\statusclient.exe /auto
 
TomcatStartup 2.5 REG_SZ
c:\program files\Hewlett-Packard\toolbox\hpbpsttp.exe
 
and then reboot the system. The printer toolbox will no longer be loaded and the security errors on the SBS system should now be gone. The actual monitor programs maybe different for different printer suppliers.