question

47451047 avatar image
0 Votes"
47451047 asked DSPatrick answered

NETLOGON Event 3210

Hi,

Hello. We have six terminal farm servers. Windows Server 2019, all updates. Today there was a problem with one server, it is not possible to log in:

We can't sign you in with this credential because yor domain is't available. Make sure your device is connected to your organization's network and try again

From logs i see: NETLOGON Event 3210

This computer could not authenticate with DOMAINURL, a Windows domain controller for domain DOMAINNAME, and therefore this computer might deny logon requests. This inability to authenticate might be caused by another computer on the same network using the same name or the password for this computer account is not recognized. If this message appears again, contact your system administrator.

Why did this arise? How to diagnose ?

  • I turn off Ipv6 on all servers, could this affect it ?

windows-server-2019
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @47451047,

I'm just following up to make sure you received my last reply and that my answers properly address your questions. If you have any further questions or concerns about this post, please let us know.


Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick edited

You could check (from PowerShell) Test-ComputerSecureChannel and if it returns False then attempt a repair
Test-ComputerSecureChannel -Repair

--please don't forget to upvote and Accept as answer if the reply is helpful--





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

47451047 avatar image
0 Votes"
47451047 answered

We rebooted the server. Now we will wait for the next crash for diagnostics

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered

Hello @47451047,

Thank you for posting here.

Hope the information provided by DSPatrick is helpful to you.

From the following link, I can see:

Note To recover from this problem, you must restart the computer or restart the NetLogon service.


NetLogon 3210 events are logged after MSA renews it password in Windows 7 SP1 and Windows Server 2008 R2 SP1
https://support.microsoft.com/en-us/topic/netlogon-3210-events-are-logged-after-msa-renews-it-password-in-windows-7-sp1-and-windows-server-2008-r2-sp1-b360abd0-dcba-f64d-db62-4f89d6548c14

If the issue persists, you can try to restart the NetLogon service to see if it helps.

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

47451047 avatar image
0 Votes"
47451047 answered DaisyZhou-MSFT commented

The problem has not arisen again so far

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @47451047,

Thank you for your update. And I am so glad to hear that the problem has not arisen again so far.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.


0 Votes 0 ·
47451047 avatar image
0 Votes"
47451047 answered

Hi. I got that error again
Test-ComputerSecureChannel returns false

Test-ComputerSecureChannel -Repair: Unable to reset the secure channel password for a domain computer account. An operation failure occurred with the following exception: The server is inoperable.

Restarting the netlogon service did not help.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

You may need to rejoin the domain with this problem member.

--please don't forget to upvote and Accept as answer if the reply is helpful--


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

47451047 avatar image
0 Votes"
47451047 answered

It's not a solution. It is repeated every two weeks.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Sounds like something broken in active directory. I'd check the domain health and replication is 100%.

--please don't forget to upvote and Accept as answer if the reply is helpful--





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

47451047 avatar image
0 Votes"
47451047 answered

How can I diagnose ? dcdiag /q does not give any errors.

repadmin /showrepl Shows all successfully

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.