Why is "Bad Password Count" in AD rising for a computer account when the computer undergo the monthly password change ?

C

Claus Bruun1

HiI see on a domain with several domain controllers that some computer accounts temporarily have "Bad Password Count" of 50-150 (viewed on the AD with the PDC role) and it seems to happen on the monthly computer password change. The situation is remediated within a day - often within an hour.What is the root cause for this ?How can it be remediated ?Is there some good information on - how AD calculates these "login" fields on the AD used - how soon the password events are propagated to other AD's and the "PDC"-AD ?I suspect a scenario like:1. Computer do successful monthly change against norma

Continue reading...
 
Back
Top Bottom