Re: [ActiveDir] Unable to reset SC for Multiple Computer Accounts

[steve patrick]

I can think of 2 things that may help - 1 is the netlogon log - and 2 is a network sniff  from the client during the  "nltest /sc_query:domain"   The netlogon log may simply show the denieds but - it may shows something else which may be useful as well.   steve ----- Original Message ----- From: Teo De Las Heras To: ActiveDir@mail.activedir.org Sent: Wednesday, June 28, 2006 1:34 PM Subject: [ActiveDir] Unable to reset SC for Multiple Computer Accounts We've migrated serveral computer account to AD.  Among the migrated accounts, once a day, users are suddenly unable to log on.  The event log shows NetLogon 5722 errors.  nltest /server:computer /sc_very:domain returns 'access_denied" netdom reset computer returns "access denied".  The odd thing is that the pwdLastSet attribute is set to 0.  The only solution thus far has been to disjoin the computer accounts from the domain and re-join them.  Any thoughts?   Teo