ARCHIVED: In Windows 2000, XP, or Vista, how do I troubleshoot authentication problems against the IU.EDU Kerberos realm?

Note: Windows 2000, XP, and Vista are the only Windows operating systems that can currently authenticate against the IU.EDU Kerberos realm.

If you have trouble authenticating against the IU.EDU Kerberos realm from a Windows 2000, XP, or Vista computer that is part of the Indiana University Active Directory, you can use the information below to troubleshoot your problem:

Verify that your computer is part of the IU Active Directory

To authenticate against the IU.EDU Kerberos realm, your computer must be running Windows 2000, XP, or Vista and be part of the IU Active Directory (i.e., be in the ads.iu.edu domain). To verify this, follow the appropriate steps below:

Windows Vista

1. From the Start menu, right-click the Computer icon, and then select Properties.
2. Under the section labeled Computer name, domain, and workgroup settings, click Change settings.
3. In the System Properties window, the Domain should be listed as ads.iu.edu.

Windows XP

1. From the Start menu or the Desktop, right-click the My Computer icon, and then select Properties.
2. Select the Computer Name tab, and then click Change....
3. In the "Member of" box, beneath the "Domain:" selection, you should see ads.iu.edu.

Windows 2000

1. From the desktop, right-click the My Computer icon, and then select Properties.
2. Select the Network Identification tab, and then click Properties.
3. In the "Member of" box, beneath the "Domain:" selection, you should see ads.iu.edu.

If you don't see ads.iu.edu in the text box beneath "Domain:", your computer is not part of the Active Directory. To add your computer to the Active Directory, see Add a Windows computer to your organizational unit at IU

Activate your Network ID within the IU.EDU Kerberos realm

If you haven't already done so, you'll need to set your passphrase using IU's Passphrase Maintenance utility, available at:

  https://passphrase.iu.edu/

If you can't remember whether you've already done this, using this utility again won't harm anything.

You will need to enter your Network ID. You can then re-enter your current passphrase and confirm it to continue using it, or you can change your passphrase. If your chosen passphrase (current or new) doesn't adhere to UITS passphrase guidelines, you'll be required to change it. For more information about passphrase guidelines, see Your IU passphrase.

Verify that your primary DNS suffix is set to ads.iu.edu

To check your primary DNS suffix, follow the appropriate steps below:

Windows Vista

1. From the Start menu, right-click the Computer icon, and then select Properties.
2. Under the section labeled Computer name, domain, and workgroup settings, click Change settings.
3. In the System Properties window, click Change.
4. In the Computer Name/Domain Changes window, click More. The primary DNS suffix should read ads.iu.edu; if it does not, enter ads.iu.edu. Optionally, you can also check the box next to Change primary DNS suffix when domain membership changes.

Windows XP

1. From the Start menu, select Control Panel, or Settings and then Control Panel.
2. If you see a heading that says "Pick a category", look for the link to the left in the window that says Switch to Classic View. If you do not see the heading, simply proceed to the next step.
3. Double-click the System icon.
4. In the resulting System Properties dialog box, select the Computer Name tab, and then click Change.
5. In the resulting Computer Name Changes dialog box, click More....
6. A dialog box titled DNS Suffix and NetBIOS Computer Name will appear. Beneath "Primary DNS suffix of this computer:", verify that it is ads.iu.edu. If it is not, enter ads.iu.edu. Optionally, you can also check the box next to Change primary DNS suffix when domain membership changes.

Windows 2000

1. From the Start menu, select Settings, and then Control Panel. Double-click the System icon.
2. In the resulting System Properties dialog box, select the Network Identification tab, and then click Properties.
3. In the resulting Identification Changes dialog box, click More....
4. A dialog box titled DNS Suffix and NetBIOS Computer Name will appear. Beneath "Primary DNS suffix of this computer:", verify that it is ads.iu.edu; if it is not, enter ads.iu.edu. Optionally, you can also check the box next to Change primary DNS suffix when domain membership changes.