We have a report setup for failed logins that is being generated daily. This report has 50+ pages and 40+ of those pages is for a specific error "Kerberos pre-authentication failed". This does not seem normal to me and would like to rectify the issues that is causing these errors. The report lists various users repeatedly. As an example, one user is showing 10 times on the first page with the timestamp being updated every 506 minutes or so. What is the problem here and how can I correct this?
There are a few things that can cause this, one is Conficker.
Google can give you a few leads to follow including time settings on devices. There is no single answer.