Does it give the same error if you run dcdiag directly on the DC?  Are you
using the 2003 SP1 version of dcdiag?  When I've seen this error in the past
I've just changed the value to 0x82000.  If you're 100% certain that it's
really correct, then maybe you should check it against a few different DC's.
Perhaps some of them have a different value for that computer object...?
Not supposed to happen, but you never know.

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Thommes, Michael M.
> Sent: Tuesday, May 17, 2005 05:58
> To: [email protected]
> Subject: [ActiveDir] "UF_PASSWD_NOTREQD" on domain controller?
> 
> Hi All,
>     I didn't get any response from my posting below, so I 
> thought I would try again.  I do have additional information 
> on this issue: if I check with ADSIEdit on the child DC in 
> question, the value is different, 0x82000 (as it should be), 
> than what is reported in DCDiag.  Could this be some bug in 
> the DCDiag software that was upgraded in SP1?
> 
> Original post:
> 
> Daily I run a DCDiag report for the domain controllers in my 
> enterprise.
> I noticed that after I upgraded my FSMO root domain 
> controller (where I run the DCDiag report) to W2K3/SP1 from 
> W2K3, I see the following for one of my child domain controllers:
> 
> 
>         Warning:  Attribute userAccountControl of XXXXX is: 
> 0x82020 = ( UF_PASSWD_NOTREQD | UF_SERVER_TRUST_ACCOUNT | 
> UF_TRUSTED_FOR_DELEGATION
> )
>          Typical setting for a DC is 0x82000 = ( 
> UF_SERVER_TRUST_ACCOUNT
> | UF_TRUSTED_FOR_DELEGATION )
>          This may be affecting replication?
> 
> 
> I am not aware of anything changing on the child DC in 
> question.  A password not required for a DC computer account 
> doesn't make much sense.
> Googling doesn't appear to produce anything useful.  Any 
> thoughts on what this might mean?  Thanks!
> 
> Mike Thommes
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive: 
> http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to