Event ID 4768 — Request for a Kerberos TGT ticket

A customer requested a Kerberos Ticket for the Ticket.

Source of event

Microsoft-Windows-Security-Auditing — Security category.

Possible causes

• Opening of the regular session
• Renewal of authentication
• Failed according to the code

Verifications to be carried out

1. Read more/95 Code
2. Identify Client Address
3. Check account and encryption type

Useful orders….

Get-WinEvent -FilterHashtable @{LogName='Security'; Id=4768} -MaxEvents 50

To be retained….

An Event ID must always be interpreted with its source, its full message, its timing and the context of the system. The same number may exist in several providers of events.