Re: netlogon error

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/26/04

  • Next message: Roger Abell: "Re: User Memory Quotas"
    Date: Sat, 25 Dec 2004 22:49:56 -0700
    
    

    "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
    news:uFTf9zf6EHA.992@TK2MSFTNGP12.phx.gbl...
    > It is my understanding that is usually not a good idea per KB article
    > below?? Netdom is usually easy enough to try. --- Steve
    >
    I was being blind to fact it was a DC for some inexplicable
    reason when I sent the afterthough post.
    It's not just not a good idea, not possible as Frank indicated.

    -- 
    Roger Abell
    > http://support.microsoft.com/kb/216393/EN-US/
    >
    > Active Directory Users and Computers (DSA)
    > With Windows 2000 or Windows XP, you can also reset the machine account
    from
    > within the graphical user interface (GUI). In the Active Directory Users
    and
    > Computers MMC (DSA), you can right-click the computer object in the
    > Computers or appropriate container and then click Reset Account. This
    resets
    > the machine account. Resetting the password for domain controllers using
    > this method is not allowed. Resetting a computer account breaks that
    > computer's connection to the domain and requires it to rejoin the domain.
    >
    > NOTE: This will prevent an established computer from connecting to the
    > domain and should only be used for a computer that has just been rebuilt
    >
    > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
    > news:%23deks%23L6EHA.3124@TK2MSFTNGP11.phx.gbl...
    > > did I actually forget to mention that you could try resetting
    > > the machine account (in AD Users and Comps) . . .
    > >
    > > -- 
    > > Roger Abell
    > >
    > > "Brown" <fbrown@mta-inc.com> wrote in message
    > > news:O2$c8m55EHA.2624@TK2MSFTNGP11.phx.gbl...
    > >> I am running SBS 2003 Pro (MAIN), with a Win2K3 Standard server
    > >> (SERVER02)
    > >> which is providing file server and AD Backup tasks.
    > >> I am getting an error messaage in the System Event Viewer, source
    > > Netlogon:
    > >> "The session setup from the computer SERVER02 failed to authenticate.
    > >> The
    > >> name(s) of the account(s) referenced in the security database is
    > > SERVER02$.
    > >> The following error occured:  Access denied."
    > >>
    > >> What do I need to do to correct this?
    > >>
    > >> Brown
    > >>
    > >>
    > >
    > >
    >
    >
    

  • Next message: Roger Abell: "Re: User Memory Quotas"

    Relevant Pages

    • Re: netlogon error
      ... Netdom is usually easy enough to try. ... Active Directory Users and Computers ... With Windows 2000 or Windows XP, you can also reset the machine account from ... Resetting the password for domain controllers using ...
      (microsoft.public.windows.server.security)
    • Re: The target principle name is incorrect
      ... This usually means that the machine account for the domain controller needs ... Using Netdom to Reset a Machine Account Password ... > Contact your system administrator to verify that your ...
      (microsoft.public.win2000.active_directory)
    • Re: Windows XP Computer Object Password Change Process with AD
      ... Each Windows-based computer maintains a machine account password history ... It will change the password as soon as it try to authenticate against AD, ... Netlogon attempts to set up a secure channel ... reset the computer's account. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Change Password on Member Server(Win2003) Machine Account - NetDom
      ... NETDOM RESETPWD can only be used to reset the password of a DOMAIN CONTROLLER. ... It will not work for member servers/clients ... Can you change password of a machine account for a Windows 2003 member ...
      (microsoft.public.windows.server.active_directory)
    • Re: Event id 5722
      ... This timing is usually when the client needs to reset it's machine account. ... are they replicating ... "Pete" wrote in message ...
      (microsoft.public.win2000.active_directory)