Why am I receiving Event ID 4625 Uknown user name or bad password for a computer account on domain server and how to resolve it?

Question

Why am I receiving Event ID 4625 Uknown user name or bad password for a computer account on domain server and how to resolve it?

There is no way I could find to see if computer account password is expired. Such as we can do with net user someUserName command to check if user account's password expired.

Answer 1

Hi jackin,

Event ID 4625 indicates that there was an unsuccessful attempt to log on to a computer using an invalid user name or password. This error can occur for various reasons, including incorrect login credentials, expired passwords, or account lockouts.

To resolve this issue, you can try the following steps:

1. Check the event logs on the domain controller to see if there are any other related events that may provide more information about the issue.
2. Verify that the computer account is not locked out or disabled in Active Directory.
3. Check the network connectivity between the computer and the domain controller.
4. Ensure that the computer is joined to the correct domain and that the time on the computer is synchronized with the domain controller.
5. Reset the computer account password in Active Directory Users and Computers.

To check if a computer account password is expired, you can use the following command:

net computer \computername /domain

This will display information about the computer account, including the password age. If the password age is greater than the maximum password age policy set in Active Directory, then the password is expired and needs to be reset.

Best regards

Qiuyang

Answer 2

net computer \computername /domain

does not seem to be a valid command on any of the windows machines I tried ?