Re: Missing Computer Accounts
- From: "Al Mulnick" <amulnick_No_SPAM@xxxxxxxxxxx>
- Date: Fri, 15 Dec 2006 11:34:44 -0500
Seen it? No, I can't say as I have. That's not normal.
You've checked to see that nobody is manually removing them. Did you check
that there's not an automated process in place?
Have you checked the users workstation logs to see what's going on there?
Have you checked the DC logs to see if any other issues are going on?
It's been my experience that computer accounts don't randomly get suicidal
and leave the domain. I've seen where automated processes that nobody was
told about can do this though.
"amiller" <amiller@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:156B9930-4428-4978-B713-BDD32CA92B19@xxxxxxxxxxxxxxxx
Hi all,
I have an issue where computer accounts just randomly go missing in Active
Directory Users and Computers. The user can no longer logon to the domain
because he no longer has a computer account in the domain. In order to
logon
I have to re-join the computer to the domain. The computer accounts are
fine
for a few days and then one or more will go missing. It seems to be
random
because its not always the same account, although sometimes it is.
I've checked event viewer under Security and specifically the Account
Management category to see what user had accessed the computer account. I
find there are no entries for any user accessing the computer account.
However, when I rejoin the missing computer to the domain and then check
event viewer - security - account management I can see the entry detailing
that I did indeed create the computer account.
As a test, I have created computer accounts manually and then deleted them
to varifiy that auditing of account management is indeed turned on. When
I
do so, I can see in the event viewer under security - account management
that
I have created and then deleted the computer accounts.
I feel confident that no one is manually deleting the computer accounts.
I've searched the Microsoft site for this issue but found nothing. I've
also
searched the internet at large and found did find that others were having
the
same issue, however, no one had a solution except to suggest that someone
was
deliberately deleting the accounts.
Some details:
Windows Server 2003 SP1
Single domain controller
XP clients
No Exchange
Symantec Managed Virus protection
Has anyone seen this and how to I correct the issue?
Thanks,
Al Miller
.
- Follow-Ups:
- Re: Missing Computer Accounts
- From: Joe Richards [MVP]
- Re: Missing Computer Accounts
- Prev by Date: Re: How do I: Do an AccessCheck on A.D. Exchange mailbox SecurityDescriptor?
- Next by Date: Re: AD 2000 to 2003
- Previous by thread: Security Event ID 538/540 - Way to discern between machine and user account logon/logoff for reporting?
- Next by thread: Re: Missing Computer Accounts
- Index(es):
Relevant Pages
|
