主页 / server / 问题 / 8121
Accepted
icelava
Asked: 2009-05-15 01:51:02 +0800 CST

Netdom 恢复机器机密

  • 772

我有一些虚拟机一个多月没有打开，还有一些已经回滚到旧状态。他们是域的成员，并且他们的机器机密已过期；因此无法再通过域进行身份验证。

Event Type:             Warning
Event Source:          LSASRV
Event Category:      SPNEGO (Negotiator) 
Event ID:  40960
Date:                       14/05/2009
Time:                       10:24:54 AM
User:                        N/A
Computer:              TFS2008WDATA
Description:
The Security System detected an authentication error for the server ldap/iceland.icelava.home.
The failure code from authentication protocol Kerberos was "The attempted logon is invalid.
This is either due to a bad username or authentication information.

 (0xc000006d)".

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c000006d  


Event Type:             Warning
Event Source:          LSASRV
Event Category:      SPNEGO (Negotiator) 
Event ID:  40960
Date:                       14/05/2009
Time:                       10:24:54 AM
User:                        N/A
Computer:              TFS2008WDATA
Description:
The Security System detected an authentication error for the server cifs/iceland.icelava.home.
The failure code from authentication protocol Kerberos was "The attempted logon is invalid.
This is either due to a bad username or authentication information.

 (0xc000006d)".

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c000006d


Event Type:             Error
Event Source:          NETLOGON
Event Category:      None
Event ID:  3210
Date:                       14/05/2009
Time:                       10:24:54 AM
User:                        N/A
Computer:              TFS2008WDATA
Description:
This computer could not authenticate with \\iceland.icelava.home,
a Windows domain controller for domain ICELAVA, and therefore this computer might deny logon requests. This inability to authenticate
might be caused by another computer on the same network using the same name or the password for this computer account is not recognized.
If this message appears again, contact your system administrator.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c0000022

所以我尝试使用netdom将机器重新注册回域

C:\Documents and Settings\Administrator>netdom reset tfs2008wdata
/domain:icelava /UserO:enterpriseadmin /PasswordO:mypassword
Logon Failure: The target account name is incorrect.

The command failed to complete successfully.

但一直没有成功。我想知道还需要做什么？

active-directory

3 个回答

  1. Best Answer

    我通常不使用 Netdom 进行这种类型的恢复。假设计算机帐户仍然存在于域中，我只是暂时将计算机移至工作组，然后在重新启动之前将其移回域。这总是比找出正确的 Netdom 命令和语法更快。

    • 1

  2. 你甚至不需要经历那个麻烦。右键单击 Active Directory 用户和计算机中的计算机帐户，然后选择重置帐户。坏蛋！

    • 0

  3. 如果这台计算机是域控制器怎么办？Yuo 无法使用 Active Directory 用户和计算机重置密码。

    • 0

相关问题