| Previous | Next |
| SEC_E_SHUTDOWN_IN_PROGRESS | SEC_E_KDC_UNABLE_TO_REFER |
SEC_E_KDC_INVALID_REQUEST
SEC_E_KDC_INVALID_REQUEST signals this condition: The Kerberos Key Distribution Center received a request that was not valid. A client or intermediary sent a KDC request that could not be processed. The root cause can be an invalid request shape, an unsupported application flow, or inconsistent identity information.
What to check
- Correlate Kerberos and KDC events across the client, target service, and domain controller.
- Record the target SPN, account, and requested authentication feature before changing directory objects.
- Check whether application updates or custom SSPI usage changed the request format or requested option.
Microsoft: Kerberos authentication troubleshooting
Looking for a different code? Search another status or error code.