K
Kiowa
There's some corporate domains as well as some articles that talk about a Security Group called the 'Windows Authorization Access Group.' Member have access to computed tokenGroupsGlobalandUniversal attributes on user objects. There's a desktop technician whose left the company. The account is locked and the password is expired. He's the owner of this group and all the computers he's an owner of are failing with authentication event 4776 for the computer$ object. The strange this is that the failure code is 0xC0000199. This isn't a standard code for this event and means No_Logon_Workstation_Trust_Account. Does anyone have insight to this group and its function? Could this expired owner be the reason for failed 4776 on computer$ objects?
Continue reading...
Continue reading...