When we re-image a computer and then try to log in, 95% of the time, we get the error "The system cannot log you on to this domain because the compouter account in its primary domain is missing or the password is invalid". If we re-image it again, it works no problem most of the time, on rare occasions, it takes a 3rd attempt. Any help or advice would be greatly appreciated. The machines are 2k and it is a mixed domain at this point.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations bkrike on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Computer accounts missing from AD
- Thread starter cldboone
- Start date
SelbyGlenn
Technical User
The problem is because you are running in mixed mode. Have you got more than one DC on your site? Is the PDC emulator on your site?
When you create a new computer account under NT or Mixed Mode 2000, all the accounts are created on the PDC. If you then log off and then log back on but are authenticated by DC other than the PDC before it has replicated with the PDC then as far as it's concerned your account doesn't yet exist!
Try creating an account then forcing replication between DC’s before you log back in. You could also try increasing the number of times the DC’s replicate each hour. The maximum is four but I wouldn’t advise this if your site are using slow links (64k)
Hope this helps,
Glenn.
When you create a new computer account under NT or Mixed Mode 2000, all the accounts are created on the PDC. If you then log off and then log back on but are authenticated by DC other than the PDC before it has replicated with the PDC then as far as it's concerned your account doesn't yet exist!
Try creating an account then forcing replication between DC’s before you log back in. You could also try increasing the number of times the DC’s replicate each hour. The maximum is four but I wouldn’t advise this if your site are using slow links (64k)
Hope this helps,
Glenn.
- Thread starter
- #3
SelbyGlenn
Technical User
You force replication via Active Directory Sites and Services but if you don't have the access to change the replication time then it is unlikely that you will have access to force replication either.
Unfortunately you're a bit stuck! There’s no real fix for this other than going to native mode. Ask someone who does have access to the replication times how many times replication is occurring and see if you can persuade them to increase the repetition.
Good Luck! Glenn
BEng A+ MCSE CCA
Unfortunately you're a bit stuck! There’s no real fix for this other than going to native mode. Ask someone who does have access to the replication times how many times replication is occurring and see if you can persuade them to increase the repetition.
Good Luck! Glenn
BEng A+ MCSE CCA
- Status
Similar threads
- Locked
- Question