2008 R2 active directory - wrong user name or password on some users

Hi,
I have 2008 R2 active directory environment with one physical DC and VMware virtual backup domain.

I got wrong user name  or password on some users including the administrator  when trying to log on to the DC\servers\workstation.

After reinstall the 2 DC's the system worked for a few days and I got the same problem: users got wrong username and password while trying to log on.
IT_Group1Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

IanThCommented:
have you checked for virus's
Miguel Angel Perez MuñozCommented:
Check workstations and DC´s time. Differences more than 10 minutes would make users can´t logon.
IT_Group1Author Commented:
Thx, Yes.

Any other ideas?
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

awender2Commented:
If multilanguage environment, keyboard layout could confuse password entries.

Does this problem persists when you reset the password to some simple one like: passworD1234
?
IT_Group1Author Commented:
Guys come on.
Don't think so simple. we're not kids here :)

Please let's try to get to the bottom of it.

Thank you
IanThCommented:
I reitterate have you checked for any virus activety it sounds wierd enough so it potentiallyt could be
IT_Group1Author Commented:
Yes, we have
lucifer82Commented:
Have you checked if there is any suspecious authentication events logged in the event log?
IT_Group1Author Commented:
Will do, thanks.
Any other ideas?
IanThCommented:
I do virus checking by a linux boot cd i have seen a few virus's that cannot be removed by a windows av program

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
awender2Commented:
If problem occurs and you reset the password to some simple one like: passworD1234 - will the problem still persist?

Do you have a multilingual environment?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.