How to fix dcdiag warning for machineaccount test
Updated: Mar 30, 2019
If you ran the Domain Controller test check using DCDIAG and faced an issue with the MachineAccount test, this post shows the root cause of the problem and how to fix it.
DCDIAG MachineAccount test warning attribute is 0x82020:
The default value for computers objects in Active Directory is:
Domain controller : 0x82000 (532480)
Workstation/server: 0x1000 (4096)
As you can see below, this Domain Controller has the value set as 0x82020:
Why?
This is a bug that happens after a computer object, pre-created in Active Directory Users and Computers (ADUC), is promoted to a Domain Controller.
Resolution
1 - Open the ADSIEdit;
2 - Find the domain controller object with this issue;
3 - Find the attribute userAccountControl and edit it to the value equal 532480
Re-execute the DCDIAG test and make sure the warning is gone, if not, reboot the Domain Controller and repeat the test.
For any doubts or suggestions, please leave a comment below.