Hi
Upon checking the log and found the below log messages (I have removed those those sensitive information)
adclient[5600]: DIAG <main> base.aduser Error: get creds: Preauthentication failed for user <computername$@domain> (enctype: ArcFour with HMAC/md5)
adclient[5600]: ERROR <main> base.adagent Can't use default machine password. Please reset computer account in Active Directory
adclient[5600]: DEBUG <main> base.osutil Module=Kerberos : resetPassword: Preauthentication failed (reference base/adagent.cpp:2232 rc: -1765328360)
adclient[5600]: WARN <main> subsystem.health HostPwd: Subsystem health problem Operation: Host change password Reason: resetPassword: Preauthentication failed
adclient[5600]: DIAG <main> base.adagent pwdChangeReschedule: state=Start inForeground=yes retryRemaining=0
adclient[5600]: INFO <main> base.adagent start: Problem connecting to DC (resetPassword: Preauthentication failed), will retry later
adclient[5600]: INFO <main> base.bind.healing Lost connection to <domain>. Running in disconnected mode: resetPassword: Preauthentication failed
So the problem is the machine password got changed but it cannot be synced up. May I know if you have reset the computer object in AD (In ADUC > Computers > Right click the computer object > Reset account) before restarting adclient? Also, is there any recreation of the computer object after it is in disconnected mode? As another note, we noticed that the domain controller in use is 2003 version, which is not supported anymore. Do you have another DC that is with 2008 or above that can be used?
For further communication, it may be better you can email me directly as to avoid any sensitive information leakage here. You can email me at albert.chu@centrify.com. Thank you!
Regards,
Albert