Re: Disappearing Workstations
- From: "Steve Duff [MVP]" <ergodic@xxxxxxxxxxxxxxxxxxx>
- Date: Tue, 28 Jun 2005 18:56:03 -0700
You might at least rummage around in the AD tombstoned deleted trash to see if the records actually were deleted or if something
more bizarre is happening.
http://support.microsoft.com/?id=258310
I could not muster great deal of confidence in a configuration where AD objects self-destruct of their own volition. I can't think
of any policy settings that would cause this, and I have to believe this is a replication issue.
Since this seems to apply only to a subset of workstations you might try reloading the O/S by hand on one of those to see if it is
something in the workstation config that is triggering the problem.
Steve Duff, MCSE, MVP
Ergodic Systems, Inc.
"Tim" <Tim@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:BBB3AD67-72F0-4196-9E25-4EC37714F8CE@xxxxxxxxxxxxxxxx
> That is correct, the workstation record is no longer present, vanished and
> some machine accounts just show up as disabled and no longer function until I
> re-enable them. How does an machine account become disabled? other than when
> an administrator disables the machine account.
>
> Thanks for your suggestions, but no luck everything looks clean.
>
> "Steve Duff [MVP]" wrote:
>
>> Do you mean that the workstation record no longer exists in AD at all? (That would be unusual in my experience.) Or that these
>> machine accounts are disabled in AD or not working for logon?
>>
>> My initial suggestions would be to
>>
>> 1) check time synchronization and time zones on the workstations and server
>> 2) look in the server and workstation event logs for any concurrent errors that might suggest a cause
>> 3) Rename the offending computers and explicitly dis-join and re-join them to the domain
>> 4) Run nltest and (if needed) netdom to verify and fix any trust problems with the computer accounts
>> 5) Take delete access off the machine account's AD record so that whatever is trying to delete it will have a hard time
>>
>> I am assuming you don't have other DCs as replication issues would be another consideration.
>>
>> Steve Duff, MCSE, MVP
>> Ergodic Systems, Inc.
>>
>> "Tim" <Tim@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:CFE5D559-E780-47A8-AD12-A601B0A6B1E1@xxxxxxxxxxxxxxxx
>> > I've had a number of instances where computers are being deleted or disabled
>> > from the domain, there are only 2 administrators here so neither one of us
>> > did this. They are logging onto the domain one day and the next day or a
>> > few days later or in one case, later that day, the computer no longer exists
>> > in the domain. This doesn't happen with all computers just some. We have
>> > three remote sites, when I need to create a computer for one of this remote
>> > sites, I create the computer account on the remote site Domain Controller.
>> > Has anybody else seen this? OS is Windows 2003 SP1.
>> >
>> > TIA
>>
>>
>>
.
- References:
- Disappearing Workstations
- From: Tim
- Re: Disappearing Workstations
- From: Steve Duff [MVP]
- Re: Disappearing Workstations
- From: Tim
- Disappearing Workstations
- Prev by Date: Expired Certificates
- Next by Date: Re: Automate joining new domain ?
- Previous by thread: Re: Disappearing Workstations
- Next by thread: My Network Places
- Index(es):
Relevant Pages
|