Dcdiag machineaccount Failed

After to perform AD health check with the command DCDIAG in a Domain Controler, you can face the following error with the test, MachineAccount, as shown below:


The default value for computers objects in Active Directory is:

Domain controller : 0x82000 (532480)
Workstation/server: 0x1000 (4096)

For the DC which reported this issue on dcdiag test, the value is set as 0x82020:


This is a bug that happens after a computer object, pre-created in ADUC, is promoted to domain controller.

Resolution

1º - Open the ADSIEdit;
2º - Find the domain controller object with issue;
3º - Find the attribute userAccountControl and set the value to 532480

Comentários