Kerberos protocol error on Azure AD / Windows 11

Russinating

Russinating

Russinating

Soldato
Joined
27 Dec 2005
Posts
17,313
Location
Bristol
We're a small team of 13, use Windows across all devices and Azure AD to manage users, security and hotdesking. Only a couple of our newer laptops are Windows 11, and when trying to input the super admin password to override UAC I get the error "The Kerberos protocol encountered an error while attempting to utilize the smartcard subsystem".
  • We don't use smartcards and have never set any such up unless anything's on by default in Azure
  • It only effects the Windows 11 devices
  • Installing apps logged in directly as the super admin works, but for obvious reasons I try to avoid this and it isn't practical
Any ideas?
 
Too many factors at play here. Are you responsible for looking after your infrastructure? Have you got any Intune configuration? Is the "super" password yours, or shared? Do you have MFA authentication or things like hello for business?
 
The new laptops may have eSims which are being seen as a smart card. Are you seeing errors under the system event log with ID 610? https://learn.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-events

Couple of links below, which although not your exact error, I would probably start by disabling the Uicc ISO Device in device manager:

HP Business Notebook, Mobile Thin Clients, and Mobile Workstation PCs - SmartCard Authentication May Fail on Computer With eSIM Capable WWAN Module When SIM Is Installed | HP® Customer Support

SmartCard Authentication might fail on computers with eSIM capable WWAN module when SIM is installed.
support.hp.com support.hp.com

 
You must log in or register to reply here.
Back
Top Bottom