Domain controller computer account expired?

From: Claude Lachapelle <ClaudeLachapelle@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 3 Jul 2009 08:08:01 -0700

Hi!

We have some domain controllers for which we have this event logged every
minutes (and more):

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 532
Date: 6/10/2009
Time: 1:11:15 AM
User: NT AUTHORITY\SYSTEM
Computer: DC01
Description:
Logon Failure:
Reason: The specified user account has expired
User Name:
Domain:
Logon Type: 3
Logon Process: Authz
Authentication Package: Kerberos
Workstation Name: DC01
Caller User Name: DC01$
Caller Domain: DOMAIN
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 848
Transited Services: -
Source Network Address: -
Source Port: -

However we could logon to this server without any problem and users do not
have any problem at all.

I did the following, but with no success, we are still getting the error
message:

How To Use Netdom.exe to Reset Machine Account Passwords of a Windows 2000
Domain Controller
http://support.microsoft.com/kb/260575

What's wrong with those domain controllers???

Thanks.

Claude Lachapelle
Systems Administrator, MCSE
.

Follow-Ups:
- Re: Domain controller computer account expired?
  - From: Meinolf Weber [MVP-DS]

Prev by Date: Re: Use restrictec accounts instead of Admin accounts. Problem with runas and deny logon locally
Next by Date: Re: Domain controller computer account expired?
Previous by thread: Re: Use restrictec accounts instead of Admin accounts. Problem with runas and deny logon locally
Next by thread: Re: Domain controller computer account expired?
Index(es):
- Date
- Thread

Relevant Pages

Re: KDC Event ID 7 and Wins startup errors.
... Event Type: Information ... Event Source: USER32 ... Logon Failure: ... Caller User Name: $ ...
(microsoft.public.windows.server.sbs)
Re: KDC Event ID 7 and Wins startup errors.
... Scheduled reboot was done to ensure that no services/tasks are failing ... Event Type: Information ... Logon Failure: ... Caller User Name: $ ...
(microsoft.public.windows.server.sbs)
Re: KDC Event ID 7 and Wins startup errors.
... Event Type: Information ... Event Source: USER32 ... Logon Failure: ... Caller User Name: $ ...
(microsoft.public.windows.server.sbs)
Re: Internet Explorer and Outlook Express problems after standby mode
... > Event Type: Failure Audit ... > Event Source: Security ... > Event Category: Account Logon ...
(microsoft.public.windowsxp.perform_maintain)
Need to resolve Event 4136
... Event Type: Failure Audit ... Logon Failure: ... Workstation Name: <systemname> ... Caller User Name: $ ...
(microsoft.public.inetserver.indexserver)