"target account name is incorrect" on server 2012 DC targeting SBS 2003 PDC. Access by IP ok.
error dialog box: "target account name incorrect" on server 2012 dc targeting sbs 2003 pdc. access ip ok.
out of blue, yesterday started.
problem machine: server 2012 dc
problem reaching: \\imc777, sbs 2003 pdc
from server 2012dc machine:
start->run \\imc777 not work \\192.168.0.77 does
the name resolves correctly correct ip
also, started happening on 2012 server dc, event log error message kerberos-security #4:
the kerberos client received krb_ap_err_modified error server host/imc777.imc.local
no other machines on network have trouble reaching pdc imc777.
however, other machines not domain controllers. virtual machines on server 2012 machine work fine.
1. tried purging kerberos tickets on imc777 no luck. the tickets purged, however.
2. tried changing passwords. logging 2012 box different accounts.
3. removed recent windows updates on both machines.
very similar to:
https://social.technet.microsoft.com/forums/windowsserver/en-us/798c969d-9a8a-4519-94ed-2ea1873d80c5/target-account-name-is-incorrect?forum=winserversecurity
i looked @ purging keys on target pdc \\imc77 did not help.
also on imc77, event log (system) clean.
thanks help
hi john,
if there @ least 1 healthy domain controller, suggest demote problematic ones.
during replication within promote process, ad database can replicated completely, can make newly promoted dc gc , dns server if necessary.
i recommend rename these problematic machines before re-promote, if machines can’t renamed, please clean metadata cleanup , give enough time ad replication.
here nice blog written ace fakey below you:
remove old dc , introduce new dc same name , ip address
best regards,
amy
please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.
Windows Server > Security
Comments
Post a Comment