| Previous | Next |
| STATUS_DRIVER_FAILED_SLEEP | STATUS_CORRUPT_SYSTEM_FILE |
STATUS_MUTUAL_AUTHENTICATION_FAILED
Mutual authentication failed between the peers
Mutual authentication means both sides validate the other side, not merely that the client supplies credentials. This status is common in domain and Kerberos contexts when the server identity, SPN, machine password, or domain-controller view is inconsistent.
The AllStat base string mentions an out-of-date server password at the domain controller; in practice the evidence to preserve is the target SPN, server account, ticket path, and domain-controller events.
What to inspect
- Check SPN registration and duplicates for the service.
- Verify the server machine account password and secure channel.
- Review Kerberos events on the client, service host, and domain controller rather than inspecting only the application log.
References
- Microsoft: Kerberos authentication troubleshooting guidance
- Microsoft: Event 4771 Kerberos pre-authentication failed
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.