An invalid Group Policy setting has been configured for this Key Distribution Center (KDC).
Using the Group Policy Object Editor, check the policy settings for:
MaxServiceTicketAge
MaxTicketAge
MaxRenewAge
Verify that the values are not 0 or larger than allowed. Also, check MaxClockSkew to ensure it is not too large.
For more information, see:
Microsoft Help and Support for Microsoft Windows Server 2008 and above
Microsoft Knowledge Base