DOCUMENT:Q250877  08-AUG-2001  [winnt]
TITLE   :Problem Changing Domains Without Rebooting Within 10 Minutes
PRODUCT :Microsoft Windows NT
PROD/VER:winnt:4.0
OPER/SYS:
KEYWORDS:kbenv kbnetwork

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Windows NT Server version 4.0 
 - Microsoft Windows NT Workstation version 4.0 
-------------------------------------------------------------------------------

SYMPTOMS
========

Changing a workstation or server from one domain to another in the Network tool
in Control Panel and then waiting more than 10 minutes to reboot can cause the
following error message when you log in to the new domain:

   The system cannot log you on to this domain because the system's computer
   account in its primary domain is missing or the password on that account is
   incorrect.

CAUSE
=====

The Netlogon service runs a scavenger thread every 10 minutes. One of the
functions of this thread is to reset the machine account password if the thread
discovers that it is the default password. When this occurs, Netlogon changes
the password on the domain controller with which it currently has the secure
channel. Because the computer has not been rebooted yet, the password is changed
through the initial domain. When the computer is finally rebooted, it attempts
to use the password that it established with the initial domain. This does not
succeed because this password is not accepted by the new domain.

RESOLUTION
==========

To avoid this problem, reboot the computer as soon as possible.

MORE INFORMATION
================

This is only an issue when you switch from one domain to another. Switching from
a workgroup to a domain does not cause this behavior because the Netlogon
service does not run while a computer is a member of a workgroup.

The password is reset as soon as possible to prevent another computer from using
an account that has a well-known password.


Additional query words: 5722 3210 enterprise administrator ea migration

======================================================================
Keywords          : kbenv kbnetwork 
Technology        : kbWinNTsearch kbWinNTWsearch kbWinNTW400 kbWinNTW400search kbWinNT400search kbWinNTSsearch kbWinNTS400search kbWinNTS400
Version           : winnt:4.0
Issue type        : kbprb
Solution Type     : kbnofix

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2001.