Something is obviously deleting the machine accounts. 

Find the deleted object DN (you can use adfind for this with the -showdel
option) and then pull the metadata with repadmin /showmeta. It will show you
the originating DSA that the delete was processed at and when. If that
doesn't help you narrow it down, enable auditing for the objects you are
expecting to disappear.

   joe

 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ
Sent: Monday, August 15, 2005 8:55 AM
To: [email protected]
Subject: [ActiveDir] Weird issue going on


I've got a weird issue going on at one of my AD sites.  One site reports
their users are sitting at "Applying your personal settings" for around
15 minutes.  I've generally found this to be a DNS problem in the past, but
not sure how to resolve it so far.

Then, their file servers are falling out of the domain.  They get a:


The session setup from the computer SERVER123 failed to authenticate.
The name(s) of the account(s) referenced in the security database is
SERVER123$.  The following error occurred:

Access is denied.


When I look, the server has no computer account in the domain.  If I rejoin
it, it rejoins, but I go look and again, no computer account in the domain.
The only way I was able to get the fileserver to work is to manually create
a computer account for the fileserver, and then join it.
Now it has happened to another server at the same site.  AGGHH!!!  Any
ideas?

Thanks

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information of the
Cooper Cameron Corporation and its operating Divisions and may be
confidential or privileged.

This e-mail should be read, copied, disseminated and/or used only by the
addressee. If you have received this message in error please delete it,
together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to