Re: Q329873, problems with DC's machine account, need help!
From: Tim Springston [MS] (tspring_at_online.microsoft.com)
Date: 07/27/04
- Next message: helpwanted: "permission"
- Previous message: Dan Varozza: "Re: Can't browse trusted domain"
- In reply to: Jeremy Lang: "Q329873, problems with DC's machine account, need help!"
- Next in thread: Jeremy Lang: "Re: Q329873, problems with DC's machine account, need help!"
- Reply: Jeremy Lang: "Re: Q329873, problems with DC's machine account, need help!"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 27 Jul 2004 16:45:01 -0500
Hi Jeremy-
Your best path is to disjoin and then rejoin the workstations to the domain.
The NETDOM command would do most of the same functions and you may as well
use the user interface.
Please repost if this does not help.
-- Tim Springston Microsoft Corporation This posting is provided "AS IS" with no warranties, and confers no rights. "Jeremy Lang" <plskeep@inthenewsgroup.com> wrote in message news:ewrXCf0cEHA.2544@TK2MSFTNGP10.phx.gbl... > So a DC's machine account was corrupted by a misguided attempt to get a > couple Mac OSX 10.3 machines to participate in AD. The (cr)Apples have been > taken off the network (almost with a hammer). > > I found a couple MS knowledge base articles that seemed to help, especially > Q329873 which told me to run nltest /sc_change_pwd:%domain name% and reboot. > This had worked like a charm (eventually... there's some kind of caching > mechanism that delays it's working on some systems), but over the weekend > many machines started having the same problem again, though the DC wasn't > having trouble running 'Active Directory users and computers' or dcdiag > today like it did Friday evening. (DCdiag passes every test.) > > It manifests with workstations access to this server (even by > \\%servername% ) getting the result: > Logon Failure: The target account name is incorrect. It doesn't happen if > they access it by \\%serverIPaddr% but this is our main fileserver and print > server, so that's obviously not good enough. Doing the nltest thing again > today seems to have fixed it (except on one or two that are still having > problems... caching?) but I need a permanent way to fix this problem. > > With further searching today I found Q216393. Looks like exactly what I > need, but netdom will not work as it's supposed to. I don't know if it's > being caused by the real problem or just that it doesn't recognize our > domain name (it's unfortunately single-level, i.e. no .com ending, but had > been working fine). Here's what I get: > >netdom reset %server% /domain:%domain% > The secure channel from %server% to %domain% was not reset. > The specified domain either does not exist or could not be contacted. > > The specified domain either does not exist or could not be contacted. > > The command failed to complete successfully. > > I tried adding the trailing period to the domain name, \\%domainname%, and a > couple other things. Anybody have any ideas?? > >
- Next message: helpwanted: "permission"
- Previous message: Dan Varozza: "Re: Can't browse trusted domain"
- In reply to: Jeremy Lang: "Q329873, problems with DC's machine account, need help!"
- Next in thread: Jeremy Lang: "Re: Q329873, problems with DC's machine account, need help!"
- Reply: Jeremy Lang: "Re: Q329873, problems with DC's machine account, need help!"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
Loading