Solved

Why these workstations were not able find the DC?

Posted on 2014-03-16
2
131 Views
Last Modified: 2014-03-24
This is using a MS Windows 2003 AD domain. As for the workstations, there are XP, Win7, and little bit on Win8. Once in a while, the problem of workstation not able to logon to the domain occurs. Please see the error message in details:

 EventID: 5722
    Source: Netlogon

    Problem Descriptions:
    The session setup by the computer ACCT_EXEC1_PC failed to authenticated.
    The name(s) of the account(s) referenced in the security database
    is wks77_PC$. The following errors occurred:

    Access is denied    

I heard that this is because the password of the computer account reset and some how, it wasn't recognized by the DC. The only way I can do is to disjoin this workstation, and then re-join it back. This method works, but still, this is not the right method right? Any way to solve the problem once and for all?

Thanks!
0
Comment
Question by:MichaelBalack
2 Comments
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
ID: 39932687
Hi,

This setting can be changed by "Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Domain member: Maximum machine account password age" using Local computer policies or domain GPOs.

Note:
If you increase this interval to 0 so that the computers no longer change their passwords, an attacker will have more time to undertake a brute force attack to guess the password of one or more computer accounts. if you dont think you have such threat then you can change it.
0
 
LVL 1

Author Closing Comment

by:MichaelBalack
ID: 39949703
okay
0

Featured Post

Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

Join & Write a Comment

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now