VM loosing domain credentials

[admin]

I have a VM which is snapshot and reverted to quite often.

The problem is, whenever the VM is reverted, it losses its domain credentials and has to be re-added back into the domain again.

Any ideas??

Thanks in advance.

[alanrenouf]

This is more of an AD issue than a VMware issue, each computer account has a password that synchronises with the domain, if you revert back to a snapshot it will have the old password and therefore not be allowed back in the domain.

If you found this information useful, please consider awarding points for Correct or Helpful.

Alan Renouf

VMware, Citrix, Microsoft Consultant

UK

[admin]

The passwords haven't been changed.

[alanrenouf]

So have you changed AD from its default 30 day sync period ?

• Remember its an automatic thing done by AD to your computer account, not your user account.

If you found this information useful, please consider awarding points for Correct or Helpful.

Alan Renouf

VMware, Citrix, Microsoft Consultant

UK

[admin]

Sorry now, but what is AD??

[alanrenouf]

Sorry, AD = Active Directory

The following forum explains a little more and gives you some nice scripts for checking if the password has run out...

http://forums.technet.microsoft.com/en/winserverDS/thread/655c9dd0-b1e1-47b1-a097-4bc6bae8ad35/

If you found this information useful, please consider awarding points for Correct or Helpful.

Alan Renouf

VMware, Citrix, Microsoft Consultant

UK

[admin]

I'm not sure if this is an AD issue. If I want to add my laptop to a domain, I have to supply a user password but not a computer password.

Just say for a second this wasn't an active directory issue, any other ideas what it might be??

[jyvesd]

How did you configure the time sync in your environment between VM, Host, AD? How did you configure the NTP?

[alanrenouf · Accepted solution]

You may want to read this...

http://www.microsoft.com/technet/scriptcenter/guide/sas_srv_ifcf.mspx?mfr=true

If you found this information useful, please consider awarding points for Correct or Helpful.

Alan Renouf

VMware, Citrix, Microsoft Consultant

UK

[jyvesd]

Hi Again, did you check if you have a time difference between your VM and your domain controller? Because by default for Kerberos, logons will fail if there is a 5 minute difference between your VM and your AD. So I believe when you revert to snapshot you might experience a time drift and if it exceeds 5 minutes you won't be able to authenticate in your domain. Cheers

[admin]

This may solve the problem. Will follow through and let ye know how it goes.

Thanks for all the help so far guys.