I have seen this many times and the "causes" are varied. However, the "reason" seems to always be the same - the computer has not reset its secure-channel passwords for a long time (7 days in NT4, 30 days in W2K) and are, therefore, considering "persona non gratas" because the password expired on the DCs. Like I said, this could be caused by various things. It could be deliberate (like you have a GPO that tells the DCs to refuse password change, or a "smart" user read that it could be done and did it) or accidental like a user restoring a computer image that's old and had an old password that does not match the current password held by the DCs. See this http://support.microsoft.com/default.aspx?scid=kb;EN-US;154501 Sincerely,
D�j� Ak�m�l�f�, MCSE MCSA MCP+I Microsoft MVP - Active Directory www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon ________________________________ From: [EMAIL PROTECTED] on behalf of Chris Blair Sent: Tue 2/17/2004 10:27 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] AD Computer Accounts I have run into this issue a few times now. We have a gotten the call a few times were a PC is unable to log into the AD. The following error message appears in the Server's Event Viewer: The session setup from the computer PCNAME failed to authenticate. The name of the account referenced in the security database is PCNAME$. The following error occurred: Access is denied. The only way I have found to fix it is to remove the PC from the domain and add it back. I have tried resetting the computer account but it does not help. Is there a better way? The data of the error message is 0000: 22 00 00 c0. Any suggestions? List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
