?
Solved

VPN/RAS server Netlogon Authentication failed error

Posted on 2009-05-08
1
Medium Priority
?
589 Views
Last Modified: 2012-05-06
Hi all,

I am getting this error for two of my remote users on my windows VPN server.
They can tunnel in fine, and they are not aware of any issues on there side.

Just wanted to know why just those two user will create this error, and how to clean it.

Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5722
Date:            5/8/2009
Time:            9:26:03 AM
User:            N/A
Computer:      LYRA (my RAS servers)
Description:
The session setup from the computer RSD04_LT (laptop name) failed to authenticate. The name of the account referenced in the security database is RSD04_LT$.  The following error occurred:
Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 22 00 00 c0               "..À    

Thanks

nirsky
0
Comment
Question by:STSDSE
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 13

Accepted Solution

by:
marine7275 earned 200 total points
ID: 24338575
You need to recreate a new computer account. It appears to be a SID issue.
Info below pulled from:
http://help.lockergnome.com/windows2/Event-ID-5722-fails-authenticate--ftopict482541.html

The error, and subsequent 'bad behavior' are because the domain has a
new sid for the workstation, while the worstation is utilizing the old
sid. The fix is easy, however.

First, log on locally to the workstation, with the local admin
account. Then, remove the workstation from the domain by joining it
to a workgroup. The name of the workgroup doesn't matter, so long as
it removes itself from the domain. You should get a window saying
"Welcome to the xxxx workgroup!". You'll have to reboot the
workstation for the changes to take effect.

To ensure that the machine is removed from the domain, go to a
workstation or server that has the AD User and Computers snap-in.
Ensure that POS04 is not present. If it is, delete it. wait 12
minutes to ensure replication to all GC's, if you are in a large
environment.

Now, go back to the workstation, logging on as local administrator.
Join the machine back to the domain, utilizing an account that has
sufficient privileges.
0

Featured Post

Get MySQL database support online, now!

At Percona’s web store you can order your MySQL database support needs in minutes. No hassles, no fuss, just pick and click. Pay online with a credit card.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Managing 24/7 IT Operations is a hands-on job and indeed a difficult one. Over the years I have found some simple tips and techniques to increase the efficiency of the overall operations. The core concept has always been on continuous improvement; a…
David Varnum recently wrote up his impressions of PRTG, based on a presentation by my colleague Christian at Tech Field Day at VMworld in Barcelona. Thanks David, for your detailed and honest evaluation!
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses
Course of the Month13 days, 4 hours left to enroll

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question