Replication problem - Bad username or password

[Bill Jackson]

We have 5 sites with 9 Win2k servers. Sites and subnets
are defined in AD Sites and Services. Replication worked
fine for last 6 months however yesterday morning
replication stopped. Manual attempts returned an error
message stating bad username or password. In addition,
Domain Security Policy and Domain Controller Policy were
unaccessible.Upon hours of research we managed to locate
an article which directed us to edit the gpttmpl.inf file
and copy the string from SELOGONINTERACTIVELOGONRIGHT= to
SENETWORKLOGONRIGHT= and this resolved the policy problem.
In addition, we then changed the policy on the Domain
Security Policy to allow access this computer from network
for Administrators, Everyone, and Enterprise Domain
Controllers. We then did the same thing for Domain
Controllers Security Policy. Next, we reset the password
on the secure channel using the NETDOM RESETPWD command.
This worked on all servers except one. Now replication
works throughout the WAN except for this one server. We
have disabled the KKDC service, restarted in safe mode
with command prompt, issued the NETDOM RESETPWD command,
restarted in safe mode, set the KKDC service back to
automatic and restarted in normal mode still to no avail.
We have used NLTEST with the /sc_change_pwd and /sc_reset
to no avail. When we use the NLTEST commands we get error -
access denied. When we use the NETDOM command, we receive
command completed successfully however when we restart the
server and attempt to replicate, the process fails with an
error bad username or password. Any suggestions?

Thanks,

Bill

 

[IBTerry [MSFT]]

It sounds like you have performed most of the steps that resolve this type
of issue.
Here are a couple more things to check.
329873 Error Message: LDAP Bind Error 31
http://support.microsoft.com/?id=329873

329642 Error Messages When You Open Active Directory Snap-ins and Exchange
http://support.microsoft.com/?id=329642

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.