Login Failure Error Accessing Server Shares
Recently working on a File/Print server (that was also a backup DC) and began to receieve the following error from client PC's trying to access it -
Login Failure: the target account name is incorrect
Most google posts seem to refer to checking DNS/WINS settings although in this case everything was fine. I could access the shares via \\192.168.xx.xx but not \\servername. Looking in to the error further there were some error logs referencing kerberos issues and the main clue was found after running netdiag. The netdiag report came back with the below error -
[FATAL] Secure channel to domain 'MYDOMAIN' is broken. [ERROR_ACCESS_DENIED]
So if your having a similar issue then it's usually a case of resetting the machine password via the netdom tool. If it's occuring on a workstation you may want to just remove it from the domain and add it back on, however if a server has the issue then this Microsoft article will help -
http://support.microsoft.com/kb/329721 (Description of netdom.exe Syntax and Versions)
http://support.microsoft.com/kb/260575 (How To Use Netdom.exe to Reset Machine Account Passwords / Domain Controller)
PFDAVAdmin “Could not expand” error
Recently came across this problem on a Server 2008 box running Exchange 2007. Having downloaded the PFDAVAdmin utility and trying to connect to all mailboxes, it gives the below error when you try to expand any of them. Fortunately it's a nice and easy fix!
Error:
Could not expand https://servername/exadmin/admin/domain/mbx/emailaddress/non_ipm_subtree/: Name cannot begin with the '0' character, hexadecimal value 0x30. Line 1, position 417.
Fix:
Run the PFDAVAdmin utility from a workstation, can download from HERE
Download Microsoft .NET Framework 1.1 HERE
DO NOT install this on the Exchange 2007 server as it will most likely reset the current .NET 2.0 settings and break Exchange 2007.
Exchange 2007 with Single Name SSL Certificate
Having configured a number of Exchange 2007 sites that only use a Single Name SSL certificate a few issues can be experienced. Outlook will often throw a couple errors your way if a few changes aren't made to Exchange/DNS to ensure they point to the name used in the SSL certificate. These errors are below:
Outlook 2007 Errors:
Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.
Your Out of Office settings cannot be displayed, because the server is currently unavailable. Try again Later.
If you're seeing the above I'd suggest checking out the below site on how to best configure Exchange to suit the SSL certificate being used.
