Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account


Photo

The trust relationship between this workstation and primary domain fai


  • Please log in to reply
11 replies to this topic

#1
zeezam

zeezam

    Member

  • Member
  • PipPip
  • 146 posts
Is there any fix for this?

My w7 clients got this message several times and I have to rejoin the domain.

We are running 2003 dc and w7 clients...


How to remove advertisement from MSFN

#2
cluberti

cluberti

    Gustatus similis pullus

  • Supervisor
  • 11,250 posts
  • OS:Windows 8.1 x64
  • Country: Country Flag
The only time you'd get it is if the computer account password no longer matches the one in AD. If it's happening frequently, is there something specific you're doing with your DCs (or with your Win7 clients) that would cause the passwords to be out of sync?
MCTS Windows Internals, MCITP Server 2008 EA, MCTS MDT/BDD, MCSE/MCSA Server 2003, Server 2012, Windows 8
--------------------
Please read the rules before posting!
Please consider donating to MSFN to keep it up and running!

#3
zeezam

zeezam

    Member

  • Member
  • PipPip
  • 146 posts

The only time you'd get it is if the computer account password no longer matches the one in AD. If it's happening frequently, is there something specific you're doing with your DCs (or with your Win7 clients) that would cause the passwords to be out of sync?


Ok.

Not what I know. Is there anything I can check or any policy I can set for this?

#4
IcemanND

IcemanND

    MSFN Junkie

  • Super Moderator
  • 3,266 posts
  • OS:Windows 7 x64
  • Country: Country Flag
I've been seeing the same thing in my environment and have yet to find the cause. If you have NETDOM you can use it to resync the computer account password with the domain. Or you can unjoin the machine form the domain, not need to perform the reboot, then rejoin it to the domain and reboot and with the exception of one machine I have not had any repeat customers.

#5
Octopuss

Octopuss

    I am the walrus

  • Member
  • PipPipPipPipPipPip
  • 1,127 posts
  • OS:Windows 7 x64
  • Country: Country Flag

Donator

This happens semi-regularly in out customer's domain. The trouble is there are two DCs and the secondary somehow acts as primary or something. The PC's account is created on the secondary, but nothing shows up on primary.

#6
cluberti

cluberti

    Gustatus similis pullus

  • Supervisor
  • 11,250 posts
  • OS:Windows 8.1 x64
  • Country: Country Flag
Well, password synchronizations are done on the PDC emulator first, and then replicated out. If you look at the event logs for both, I'm guessing one (or both) of them are having issues. There should be event viewer interesting'ness on the DCs, at least, and maybe the clients too.
MCTS Windows Internals, MCITP Server 2008 EA, MCTS MDT/BDD, MCSE/MCSA Server 2003, Server 2012, Windows 8
--------------------
Please read the rules before posting!
Please consider donating to MSFN to keep it up and running!

#7
IcemanND

IcemanND

    MSFN Junkie

  • Super Moderator
  • 3,266 posts
  • OS:Windows 7 x64
  • Country: Country Flag
Cluberti, you know anything specific we could look for? I've glanced at the client logs but never noticed anything useful. I don't have access to the DCs to look at those logs but if I had any starting point I would be better off than I am now.

#8
Cyrius

Cyrius

    Newbie

  • Member
  • 41 posts
  • OS:Windows 7 x64
  • Country: Country Flag
I have gotten this a few times and resetting it to the old password through AD Users and Computers allowed me to get back in.

This typically has happened on my Road Warrior laptops which are not often connected to my actual domain, but which are a member.

Edited by Cyrius, 23 February 2012 - 10:10 AM.


#9
cluberti

cluberti

    Gustatus similis pullus

  • Supervisor
  • 11,250 posts
  • OS:Windows 8.1 x64
  • Country: Country Flag
@IcemanND, you would need to look at the logs on the DCs.
MCTS Windows Internals, MCITP Server 2008 EA, MCTS MDT/BDD, MCSE/MCSA Server 2003, Server 2012, Windows 8
--------------------
Please read the rules before posting!
Please consider donating to MSFN to keep it up and running!

#10
IcemanND

IcemanND

    MSFN Junkie

  • Super Moderator
  • 3,266 posts
  • OS:Windows 7 x64
  • Country: Country Flag
I was afraid of that. And with as random as it happens finding something useful in them can be next to impossible with six DC's to dig through.

#11
cluberti

cluberti

    Gustatus similis pullus

  • Supervisor
  • 11,250 posts
  • OS:Windows 8.1 x64
  • Country: Country Flag
Password changes happen first on the pdc - use ntdsutil to figure out which one that is, and that's the one to look at for starters. If it was easy, we could replace you with the janitor! :)
MCTS Windows Internals, MCITP Server 2008 EA, MCTS MDT/BDD, MCSE/MCSA Server 2003, Server 2012, Windows 8
--------------------
Please read the rules before posting!
Please consider donating to MSFN to keep it up and running!

#12
tj18

tj18
  • Member
  • 2 posts
  • OS:Server 2008 x64
  • Country: Country Flag
Thanks - The replies here helped shed some light on my issue - but still need more assistance. Will make a separate post.. and will probably need to learn the syntax's of ntdsutil.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users



How to remove advertisement from MSFN