Login Issue on the Windows Server 2019/2022 Domain

Question

PerserPolis-1732 1,971

Hi,

I have 3 domain Controller. But my FSMO is holding on of the domain controller.

Every time if the User try to login into DC, I see on the event log the following message

Pre-authentication information was invalid: usually means bad password. This entry represents 173 matching events occurring within 600 seconds

"Multiple Failed Logons" ?????????

But I am sure the Password is OK and the user can login without any issue.

Regards

1 answer

Answer 1

Thank you for posting in Q&A forum.

The error typically indicates a problem with the password, but since you're confident the password is correct, there might be other factors at play.

Here are a few potential causes and solutions:

Ensure that the time on the user's machine and the Domain Controller (DC) are synchronized. Kerberos is sensitive to time discrepancies.
Check if the user's account is getting locked out due to multiple failed login attempts. This could be caused by another device or service trying to use old credentials.
Sometimes, old or incorrect credentials are cached on the user's machine. Clearing the cached credentials might help.
Ensure there are no network issues causing intermittent connectivity problems between the user's machine and the DC.
Verify that there are no duplicate SPNs in your environment, as this can cause authentication issues.
Ensure that the Kerberos configuration on both the client and the server is correct. This includes checking for any policies that might affect Kerberos authentication.

References:

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.