Problem : How to fix the error message ‘The session setup from the computer NE-LAPTOP failed to authenticate. The following error occurred: Access is denied. ‘.
Lately I have been getting inmy Server Performance Report two error messages.
The Event ID are: 5723 & 5805.
The error messages are:
Critical Errors in System Log
Source Event ID Last Occurrence Total Occurrences
NETLOGON 5723 6/18/2009 5:28 AM 6 *
The session setup from computer ‘NE-LAPTOP’ failed because the security database does not contain a trust account ‘NE-LAPTOP$’ referenced by the specified computer. USER ACTION If this is the first occurrence of this event for the specified computer and account, this may be a transient issue that doesn’t require any action at this time. Otherwise, the following steps may be taken to resolve this problem: If ‘NE-LAPTOP$’ is a legitimate machine account for the computer ‘NE-LAPTOP’, then ‘NE-LAPTOP’ should be rejoined to the domain. If ‘NE-LAPTOP$’ is a legitimate interdomain trust account, then the trust should be recreated. Otherwise, assuming that ‘NE-LAPTOP$’ is not a legitimate account, the following action should be taken on ‘NE-LAPTOP’: If ‘NE-LAPTOP’ is a Domain Controller, then the trust associated with ‘NE-LAPTOP$’ should be deleted. If ‘NE-LAPTOP’ is not a Domain Controller, it should be disjoined from the domain.
Source Event ID Last Occurrence Total Occurrences
NETLOGON 5805 6/18/2009 4:02 AM 6 *
The session setup from the computer NE-LAPTOP failed to authenticate. The following error occurred: Access is denied.
————————–
On my server under Server Management–>Client Computers One of my users has an ‘X’ next to the computer name.
What does that mean?
How do I resolve this ?
Its been two weeks since its been like this.
No new changes were made to his laptop, not even updates.
Please advise.
Solution : How to fix the error message ‘The session setup from the computer NE-LAPTOP failed to authenticate. The following error occurred: Access is denied. ‘.
Apparently NE-LAPTOP is a domain member. However the machine account that holds the shared secret for communication between the NE-LAPTOP and the DC has expired. This can happen if the member is out-of-communication with the DC for a long period of time (weeks).
Go into Active Directory Users and Computers, delete NE-LAPTOP and re-add it again. Then go to NE-LAPTOP Control Panel -> Networking and change it from a domain member to a workgroup, reboot, then change it back again. This will resynchronize the shared secret.
Alternate method: On the DC open an administrative console and type:
NETDOM.EXE RESET NE-LAPTOP /Domain:DomainName /UserO:User /PasswordO:*
For DomainName type the name of the domain. For User type the name of the local Administrator account on the restored computer (typically NE-LAPTOP\Administrator). Type in the administrator password of NE-LAPTOP when you are prompted. (Do not confuse it with the domain administrator password.)
