Kerberos and windows problem ...

[daylebo5@gmail.com]

> Have you created a host principal for the machine in the KDB?
These are the following principal i have created in connection with
windows ....
host/windows.xyz.com at XYZ.COM  using  this cmd (ank -pw password
host/windows.xyz.com)
tom at XYZ.COM using (ank tom)

> Have you set the Kerberos Password on the machine using KSETUP?
Used the following cmds
C:> Ksetup /setdomain XYZ.COM
C:> Ksetup /addkdc XYZ.COM kdc.xyz.com
C:> Ksetup /setmachpassword password

i also created a user 'tom' in computer management and mapped the user
using the following cmds ...
C:> Ksetup /mapuser tom at XYZ.COM tom
C:> Ksetup /mapuser * *

> Are there errors reported in the KDC log?
there are two entries in krb5kdc.log

Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): AS_REQ (7 etypes {23
-133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
etypes {rep=3 tkt=16 ses=1}, tom at XYZ.COM for krbtgt/XYZ.COM at XYZ.COM

Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): TGT_REQ (7 etypes {23
-133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
etypes {rep=1 tkt=16 ses=1}, tom at XYZ.COM for
host/windows.xyz.com at XYZ.COM:

> Are there errors reported in the Windows Event Log?
Logon Failure:
 	Reason:		An unexpected error occurred during logon
 	User Name:	tom
 	Domain:		XYZ.COM
 	Logon Type:	2
 	Logon Process:	User32
 	Authentication Package:	Negotiate
 	Workstation Name:	WINDOWS


just one more thing .. there is no active directory installed on the
windows client ... 
any sugestions will help..