Windows 10: Event logs - The domain controller attempted to validate the credentials for an account

Hello,Can you explain that events log why this is happening? user changed password by himself and there is many logs like this:how can i fix it? many thanksKerberos pre-authentication failedThe domain controller attempted to validate the credentials for an accountKerberos pre-authentication failedThe domain controller attempted to validate the credentials for an accountKerberos pre-authentication failedThe domain controller attempted to validate the credentials for an account

:)

 

Child Domain Controller logging 0xC0000064 for accounts attempting to authenticate from another child domain

Dear All,

I am trying to understand what are the factors that would cause event id 4776 to be logged with 0xC0000064 error code.

The scenario is, several domain accounts say for example, accounts in child domain child1.example.com is trying to authenticate through child2.example.com but the DC in child2.example.com keeps the attempts failed indicating "User name does not exist".

May I ask you to assist with info on how the authentication is expected to take place from one child domain to another child domain? Is it possible? If yes, how it works? More details would very helpful.

If this is possible, what are the probable reasons behind a DC to be generating failure events with error code "User name does not exist". What could be done to fix these problems?

Thanks for your support in advance.

The DC is running Win 2012 R2 standard

Regards,

Madhan

 

Windows users can't log in

It didnt lol

I believe the DC was the DNS as well. No one could log in and secondary DNS was not replicating properly. Had to rebuild most of the stuff. A real PITA

 

UnattendedJoin error: failed to find the domain data (0x6e)

Thanks for the suggestion! I don't want to add a domain account, as this is a generic unattended install that will be used for all company machines. Do you think it's possible that the computer would join the domain if, instead of using UnattendedJoin in specialize, I used your steps but left out the specific account?

The other thing I was thinking was to use a generic account to allow the domain join during the specialize step. I added a machine password in the UnattendedJoin component, and instead of getting the error listed above, I got an authentication error, which makes me think I could probably do a secure join instead of the unsecure join.

Thoughts?