Member Server - Machine Account Questions

-

hi all,

i'm looking @ joining 2008r2 server (that needs cloned testing every , again) domain. understand member server sets machine account password, not dc. want know how can find out on member server when member server itself believes password last set (and therefore when change next). preferably i'd in method can script.

secondly, server backed entire vm. understand member server has copy of old machine account password, , can attempt authenticate (for when machine account password change has not propagated through domain). domain have copy of old password in case of vm has been rolled before single machine account password change?

(yes have read: https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/)

regards,

david

hi david,
q1: query pwd-last-set attribute of machine account verify that. date , time password account last changed. useful cmdlet get-adcomputer, please see details from: https://technet.microsoft.com/en-us/library/ee617192.aspx
q2: password stored in computer account object in unicodepwd (current password) , lmpwdhistory (previous password) attributes in ad. in way, if computer changes password (excluding domain join) @ dc1 , attempts authenticate @ dc2 prior replication of new password, computer should still able logon old password.
regards,
wendy

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

-
i seeing odd error on 1 of our domain controllers. have dealt event id 1058 errors whereby policy (or policies) not replicating, receiving error along error code 1326 on server, , apparently happening default domain policy: log name:      system source:        microsoft-windows-grouppolicy date:          8/10/2015 3:09:54 pm event id:      1058 task category: none level:         error keywords:      user:          s-1-5-21-1484152634-2550175353-3916092219-3287 computer:      <dc name>.<domainname> description: processing of group policy failed. windows attempted read file http://schemas.microsoft.com/win/2004/08/events/event ">   <system>     <provi...
Read more

Suspicious event log Event ID: 4905

-
hi thr, could please me understand causing such event logs generate ? as  i understand, vssvc.exe pertains volume shadow copy used backup purpose.  we have third party application used taking backup of servers. the event longs generated following messages: 1) attempt made unregister security event source. 2) attempt made register security event source. these events not regular generated on random days. standard fields: date:               2013/10/19 time:               02:32:19 importance:         critical rule name:          security event monitored machine:  <domain controller> log format:         windows log name:           security event id:           4905 in work hours:      yes dynamic fields: internal timestamp: 2013/10/19 ...
Read more

DCOM received error "2147746132" from...

-
hi everybody, i have dc (my windows essentials 2012 server) , windows 2012 server in network.  the windows server 2012 inside domain. on server, got "non stopping" error says in event logs : ===> dcom received error "2147746132" fromd computer xxxx(my dc computer) while server trying activation : {6df8cb71-153b-4c66-8fc4-e59301b8011b} it never stops, got 11000+ new events :s i found : http://support.microsoft.com/kb/971153/fr i'm not sure should ? does got idea ? matthieu. hi, please try solution mentioned in below link: http://www.eventid.net/display-eventid-10006-source-dcom-eventno-272-phase-1.htm regards, cicely Windows Server  >  Windows Server 2012 General ...
Read more