Posts

Showing posts with the label AD_Troubleshoot

Trusted error

Event ID 5723: The trust relationship between this workstation and the primary domain failed. The session setup from the computer DOMAINMEMBER failed to authenticate. The name of the account referenced in the security database is DOMAINMEMBER$.

Netlogon - Function

  Functions of NetLogon Service on Domain Controllers: NetLogon Service is very important for Domain Controllers. This service is started and configured to start Automatic when you promote a server to Domain Controller. If this service is not running then there are a few things which fail. 11. This service is responsible for creating a Secure Channel between Domain Controllers and client     computers. Secure Channel is created to pass the authentication packets. 22.   Service performs the registration of SRV records, CNAME and other DC records in the DNS Server to advertise the availability of Domain Controllers in the domain. 33.   SRV Records registered by NetLogon Service are stored in C:\Windows\System32\Config\NetLogon.DNS file. 44.   Performs registration of SRV Records every 24 hours depending on the version of Operating System in use. 55.   Registers the SRV Records for a site where there is no Domain Controller. This i...

AD Account Lockout Tools - PART 1

Image
Applies To: Windows Server 2003 with SP1 After you determine the pattern for the account lockouts and narrow down your scope to a specific client computer or member server, you should gather detailed information about all of the programs and services that are running on that computer. Some of the information that you should obtain includes: Mapped network drives Logon scripts that map network drives RunAs  shortcuts Accounts that are used for service account logons Processes on the client computers Programs that may pass user credentials to a centralized network program or middle-tier application layer The following sections discuss the tools that you can use to help you gather information from the network environment. The LockoutStatus.exe Tool The LockoutStatus.exe displays information about a locked out account. It does this by gathering account lockout-specific information from Active Directory. The following list describes the different informatio...