Computers loosing trust to my domain!

hi!

so deployed windows 7 many remote locations have no local domain controller , connected head quarter slow link, couple months later have received couple of cases computers looses trust domain when user tries login get: "trust relationshitp between workstation , primary domain failed"

on domain controller see event (4625):

an account failed log on.  subject: 	security id:		null sid 	account name:		- 	account domain:		- 	logon id:		0x0  logon type:			3  account logon failed: 	security id:		null sid 	account name:		thecomputer$ 	account domain:		thedomain  failure information: 	failure reason:		unknown user name or bad password. 	status:			0xc000006d 	sub status:		0xc000006a  process information: 	caller process id:	0x0 	caller process name:	-  network information: 	workstation name:	thecomputer 	source network address:	10.146.34.31 	source port:		62728  detailed authentication information: 	logon process:		ntlmssp  	authentication package:	ntlm 	transited services:	- 	package name (ntlm only):	- 	key length:		0

according site: https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=4625

the event id saying computer trying login wrong password:

0xc000006a

user name correct password wrong

i have read through blog post , thing can imagine secure channel have failed, reason?

checking password powershell:

ps c:\windows\system32> get-adcomputer computer -properties * |select *pass*   allowreversiblepasswordencryption : false badpasswordtime                   : 0 cannotchangepassword              : false lastbadpasswordattempt            :  passwordexpired                   : false passwordlastset                   : 2015-09-03 20:38:20 passwordneverexpires              : false passwordnotrequired               : false

can see password reset recently.

any ideas ? don't want happen on 400~ machines have remote.

thanks!

hi

 the resolution "trust relationship between...." check ms article,

https://support.microsoft.com/en-us/kb/2771040

aso event id 4625 correct,it point bad password(on clients cache,etc),check forum answer , run "nltest /sc_verify:domain-name" test on clients,

https://social.technet.microsoft.com/forums/windowsserver/en-us/ae9da10a-b4d2-4eda-ae6d-ad61b7b6ab79/audit-failure-event-id-4625?forum=winserversecurity

---

this posting provided no warranties or guarantees,and confers no rights. best regards burak uğur

Windows Server  >  Directory Services