Account Out of Sync I_NetLogonControl failed: ERROR_ACCESS_DENIED

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hi,
Environment : Windows 2003R2 SP3 32bit SP2 Domain, Windows 2003 R2 64bit SP2
member server running SQL 2005.

Issue:
The member server has gone out of sync with the domain account:

Errors:

Event Log
++++++++++++++++++++++++++++++++++++++++++++++
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 14/05/2009
Time: 11:19:43 AM
User: N/A
Computer: MEMBERSERVER
Description:
This computer was not able to set up a secure session with a domain
controller in domain DOMAINNAME due to the following:
Not enough storage is available to process this command.
This may lead to authentication problems. Make sure that this computer is
connected to the network. If the problem persists, please contact your domain
administrator.

ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up
the secure session to the primary domain controller emulator in the specified
domain. Otherwise, this computer sets up the secure session to any domain
controller in the specified domain.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 17 00 00 c0 ...À
++++++++++++++++++++++++++++++++++++++++++++++

Running nltest gives the below results;

nltest /sc_query:domainname.local /server:sbs.domainname.local
I_NetLogonControl failed: Status = 5 0x5 ERROR_ACCESS_DENIED


After doing bit of research I found that I can reset the secure channel by;

nltest /sc_change_pwd:domainname.local
nltest /sc_reset:domainname.local

Or disjoining and rejoining to the domain.

As we are running SQL is there any impact by doing any of the above? What
would be the method that would least impact the server and the applications?

Thank you
Gihan
.

Relevant Pages

  • Re: 2003 server joining domain problem
    ... yes it was a member server and event viewer shows the following after ... This computer has been successfully joined to domain 'torque'. ... This computer was not able to set up a secure session with a domain ... If this computer is a domain controller for the specified domain, ...
    (microsoft.public.backoffice.smallbiz)
  • Re: Account Out of Sync I_NetLogonControl failed: ERROR_ACCESS_DENIED
    ... The member server has gone out of sync with the domain account: ... If this computer is a domain controller for the specified domain, ... As we are running SQL is there any impact by doing any of the above? ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote site loses access to member server when WAN goes down
    ... They are connected with a VPN between two hardware ... >> the remote office lost access to the local member server. ... >> I did not realize that cutting off access to the domain controller would ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote site loses access to member server when WAN goes down
    ... "I can't make the remote member server a backup domain controller in an SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: I need a little IPSec help, please.
    ... PC is a member server. ... "Server " default IPSec policy. ... create a new Group Policy Object underneath the Default Domain Controller ...
    (microsoft.public.cert.exam.mcsa)