unexpected login error status 3221225779 RRS feed

  • 问题

  • XP客户端无法用AD帐号登陆,提示:unexpected login error status 3221225779,重新加域后故障依然,不解!!

    I had a user with a Dell Latitude D620 with XP SP2, using Novell 4.91 SP3, and connecting to an Active Directory domain. At the initial Novell login screen, you get error ?Unexpected login error. Status 3221225779? after entering a username and password. Logging in with a local ID on the hard drive worked fine, but I could not login to the domain even with an admin ID. The final solution came down to correcting the date and time on the PC.

    A PC user was trying to fix his PC?s time earlier because it was 3 minutes off. He didn?t realize that while fixing the minutes, he changed PM to AM, and changed the date to 1 day ahead. (For some reason this XP SP2 computer did not have the Internet Time tab on the Date and Time Properties to sync the date and time with the Internet.) I had fixed the time 15 minutes into the call, but I just never payed attention to the date.

    Apparently if you have a future date and time on your PC, Active Directory or Novell or something will not let you connect. Here was a possible reason from one of my super-tech co-workers:
    "The kerberos ticketing system or the secure communications with AD (similar to PKI) may have been affected by the time change. Altering the time can make the PC / Domain controller think that the communication channel is being hacked (or that the certificate issued to the PC has expired).
    Another possible problem could have been NMAS / NICI (Novell's version of PKI/kerberos communication channel). We typically don't install and configure the client to use NMAS or NICI, but it does get installed from time to time and it may explain your problem if it were installed. NMAS & NICI can also be difficult to un-install, and re-installing on top of a client that already (incorrectly) has (or had) them installed and mis-configured generally won't work. You have to verify that the NMAS & NICI software is completely removed and the registry is purged of the settings prior to re-installing the Novell Client. NICI may be required as part of the install, but its settings should be left alone lest you enjoy problems such as the one described."
    • 已编辑 ytmin 2009年2月9日 5:05
    2009年2月2日 1:06