Service Password will NOT Update

[Richard]

HI,
I have a 4 server AD W2K domain with 2 global catalogs.
I suddenly cannot start services with domain user accounts
which have "all" of the required rights for starting that
service without getting an "access denied" error message
or "Error 1069: The service did not star due to a logon
failure".

Resetting the password does not help or using another
userid. What gives ??? any ideas would be most welcome.

Thanks . . ..

 

[Herb Martin]

How do you know they have "all the rights"? Check replication AND
especially Name resolution.

If name resolution fails then typically Authentication will too.

DCDiag output to a text file -- search for FAIL, WARN, IGNORE
on each DC.

Make sure all machines NIC properties point to the INTERNAL DNS
Server (set) ONLY. Make sure the internal DNS is dynamic and that
the DCs are fully registered (restart NetLogon if you fix any of this.)

Remember that DCs much ALSO point their properties to the internal
dynamic DNS server (set).

Don't try to add an "external DNS" server to those properties.