topic Re: View Service account getting locked in Horizon Desktops and Apps

View Service account getting locked

v_balan77 — Fri, 08 Feb 2019 08:53:06 GMT

Seeking help to find the place to update my new password for service account used in view administrator.

A common service account "view_composer" is configured for vCenter and composer server operation. Unfortunately password for this account got changed in AD and new password updated in View administrator > View configuration > Servers > vCenter Servers

1. vcenter server settings

2. view Composer server settings

3. domains

Though i have updated the new password, this account getting locked frequently. i see security events in connection server .

Event ID: 4625

Task Category : Logon

Failure reason : Unknown user name or bad password.

Screenshot attached.

Re: View Service account getting locked

vBritinUSA — Fri, 08 Feb 2019 13:32:53 GMT

Have you used this account for system DSN for Composer DB?

Re: View Service account getting locked

sjesse — Fri, 08 Feb 2019 13:41:14 GMT

did you also use the user/password for the events database?

Re: View Service account getting locked

vBritinUSA — Fri, 08 Feb 2019 18:15:02 GMT

Events DB only supports the SQL account that I know of but has to be something like that.

Re: View Service account getting locked

sjesse — Fri, 08 Feb 2019 18:19:31 GMT

It works if you force it, some people do not like sql auth.

Re: View Service account getting locked

vBritinUSA — Fri, 08 Feb 2019 19:51:53 GMT

interesting! I didn't ever try!

Yeah, I am one of them not wanting to use SQL accounts if possible.

Re: View Service account getting locked

BenFB — Sun, 10 Feb 2019 07:06:47 GMT

If the service account is truly only being used for Horizon then the locations you mentioned should cover it (vCenter, Composer and Domains). We recently saw something similar where we updated the service account password and Composer continue to use the old password. We followed Restart order of the View environment to clear ADLDS (ADAM) synchronization in Horizon View (2068381) and that resolved it.

Re: View Service account getting locked

ymagalif — Mon, 11 Feb 2019 05:31:19 GMT

v.balan77@gmail.com,

When you remove and add the service account in View administrator > View configuration > Servers > vCenter Servers for vCenter and Composer, you should use the User Principal Name format of the account, for example:

username@domainname.com

Do not use the down-level logon name like DOMAINNAME\username.

I know this sounds ridiculous, but this tip was a recommendation from VMware support for a different issue, and helped me.

This is due to a rare bug in View 7.x.

Perhaps it can help you in this issue.

Sincerely,

Yury Magalif

Re: View Service account getting locked

v_balan77 — Tue, 12 Feb 2019 06:31:01 GMT

Issue not resolved.

1. This account only used in Horizon view environment and new password updated in View Admin page

2. Account used either EventDB nor Composer DB DSN.

3. Tried update user name with UPN format username@domain but issue not resolved.

4. Also tried clean reboot option but no luck

Regards,

Balan V

Re: View Service account getting locked

BenFB — Tue, 12 Feb 2019 16:33:08 GMT

You need to track down what is locking out the service account. From the domain controllers you should be able to identify the IP. In the interim I would configure your service account to disable it from being locked out.