| Previous | Next |
| STATUS_VOLSNAP_PREPARE_HIBERNATE | STATUS_STACK_BUFFER_OVERRUN |
STATUS_USER2USER_REQUIRED
The Kerberos request requires user-to-user mode
Kerberos user-to-user is used when the service ticket must be encrypted using a key associated with another user context rather than the normal long-term service key. Windows can surface this status when the requested principal cannot be handled by the ordinary service-ticket path.
Do not diagnose it as a network outage. The relevant data is the service principal, SPN registration, account type and whether the target service has a usable service key for normal Kerberos.
What to inspect
- Check the SPN and account type associated with the requested service.
- Inspect KDC TGS events for user-to-user or missing-service-key indications.
- Compare behavior with a correctly registered service account.
References
- Microsoft Open Specifications: MS-KILE Kerberos extensions
- RFC 4120: Kerberos V5
- Microsoft Open Specifications: NTSTATUS values
- Microsoft: Event 4769 Kerberos service ticket operations
Looking for a different code? Search another status or error code.