• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 749
  • Last Modified:

Do AD machine accounts expire?

We have a machine that is set to autologin to a network account.  It runs some equipment on our production line.  Users login to the software many times every day, but they never reboot or shutdown this machine.  It stays logged in and powered on 24/7/365.  About every 90 days, the machine loses all connection to AD and file shares. Of course this only happens during 3rd shift, when we have no one from IT in the building. The only way we can get it working again is to login as a local admin, remove it from the domain, and readd it to the domain.  Then it works for another 90 days.

Is there a way to prevent this from happening?  Will a simple reboot every 30 days alleviate this issue?

1 Solution
Machine accounts passwords don't expire from the AD side of view.

When the machine account's password is 30 days old the machine ifself will initiate a password change. The DC's never initiate the change.

If ie. a machine has been offline for 60 days and is brought back online it will change the password. No need to rejoin the domain.

Have you looked in the computers event log if something is logged when this happens?
Sounds to me like there is a service that is stopping.
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

hundetAuthor Commented:
I'm trying to get access to that machine to check eventlog.  It runs a piece of manufacturing equipment 24/7 so I'm having problems getting access.  Remote tools are shutdown by firewalls so that won't work either.

I'll post results as soon as I can get to it.
You can get to the event log by managing the the PC through Active Directory. Just right click on the computer account and go to manage.
hundetAuthor Commented:
No time to fully investigate this.  Production Line is too busy.  I'll deal with it in another 60 days.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now