Troubleshooting Event ID 3210 and 1000


This error was reported to me by an user,

After login with a Local Account, I’ve collected this information from event viewer.

Event Type: Error
Event Source: Userenv
Event ID: 1000
Time: 22:05:55
User: NT AUTHORITY\SYSTEM
Description: Windows cannot determine the user or computer name. Return value (1326).

The next error appears in all domain controllers.

Event Type: Error
Event Source: NETLOGON
Event ID: 3210
Time: 8:36:36
User: N/A
Description: Failed to authenticate with \\XXXXXXX.com, a Windows NT orWindows 2000 domain controller for domain XXXXXXX.

To solve this issue we have two options:

1 – Remove server from domain and Add it again.

OR

2 – Reset secure channel using Netdom.exe, and check using nltest.exe

NETDOM reset ‘machinename’ /domain:’domainname

NETDOM VERIFY machine /Domain:domain [UserO:user] [/PasswordO:[password | *]]

You can read more about this Here. http://support.microsoft.com/kb/216393

Thank You for reading.

Advertisements

About rodvars
Been working in IT Services/Consulting for the past 15 years. My main areas of work are planning, development, managing and administration System infrastructures focusing on optimizing user processes, enforcing business security, performance enhancements, high availabilty and infrastucture scalability.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: