Windows Forum

Ask something
Discussion Locked

Computer account missing in AD 2003

0 helpful
20 replies

by joshhansen

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
A computer account in Active Directory keeps disappearing. When this happens, no one can logon to that workstation unless they use a local user name and password (cached accounts don?t work either). To resolve the problem, we have to log on using local administrator, disjoin the domain (by joining a workgroup), reboot, then rejoin the domain. After rejoining the domain, all is well for a few days until it happens again. We have no proof that anyone is deleting the account from active directory. Any ideas what may be causing this?

20 replies

by w2ktechman

First, try auditing the AD changes being made,
second, check out the system, and what software is installed, makle sure no viri are found

by voldar

Why don't you look after your computer account in other OUs? Maybe, by mistake, you just simply drug-and-drop it into another OU. NOTHING happen by itself!

by joshhansen

if that were true, then a search of the entire domain for that computer object wouldn't return "not found". Simply moving the computer object to a different OU wouldn't cause this problem.

by kevin.square

just in case it tweaks something. When we moved to XP if they were running or if we installed an older version of fsecure antivirus this would happen.

Is it like in NT domain where machine account password is changed every 7 days. Maybe something similar when machine goes to AD to negotiate new password.

by joshhansen

active directory 2003, Computer running XP sp2 - has been running xp sp2 for about 6 months (fresh install) - this problem just recently started happening. No new software recently. the machine account password isn't changing, the whole account is vanishing from the domain. Only happening on this 1 computer. We run McAfee Virusscan.

by blackcurrant

Hi

A long shot - has the computer been 'restored' to a previous state using Go Back or System Restore or a similar program?

Good luck

by joshhansen

No - Good thinking, though. After the first time it happened, i disjoined and rejoined it to the domain. Then it happened a week later. Very strange. I'm just looking to see if anyone has seen this before. There may not be a solution.

by ghemant

Hi,
for an instance just look over mrx / browser in Eventviewer ..if you can see this it might happen that your system's lan cable is pass near by heavy duty electric cable that might cause error of browsing domain -> browser service get affected and led to disjoin - remove from domain ...

regards

by joshhansen

The computer is a member of the domain, then the computer account object is suddenly gone for no reason that i can find. The computer itself thinks is still a member. Have to unjoin then rejoin domain to fix it. This has happened a couple times on this one machine only

by sgt_shultz

that is a weird one. when you add another computer to domain (other than this box) it stays, right? because that would prove its not a ad replication thing...)
i like the network wiring problem theory but why would that take the account out of ad?
this probably has easy solution but hackles on back of my neck standing up a little.
you on latest 2k3 sp?

by lmayeda

Had a similar situation on our network. The PC in question had McAfee Antivirus and Firewall installed. I uninstall the software and problem disappeared. Perhaps it was a conflict between the McAfee software and a Microsoft update... don't know. User claimed that no new software was added. I suggest uninstalling McAfee and see if that resolves your problem. In our case, I re-installed Symantec Corp but I would be interested to see if you can re-install McAfee and have it work.

by joshhansen

We also McAfee but no firewall - the xp sp2 firewall is also disabled. We ended up reloading this machine from scratch and haven't had a problem since. It may be McAfee causing this somehow so i'll give you the points. Thanks

by jkn1ck

A couple of comments:

Check event log when it happens. Both Application and system logs. Next check that machine name has not been changed. My machine quit attaching to wireless when MSN Messanger updated. I removed the update and everything worked as before. (this shows in event log)

by juangp1

This issue is resolved by ensuring that whatever firewall application (Proventia in my case) is not blocking the domain controllers from contacting the workstations, after a while, when AD can not communicate with the workstation, it will be deleted from AD.

This discussion is closed to new replies.