Domain connection shows as "unauthenticated"
One possible reason for this issue is when the machine account password gets out of sync with the domain controller.
This can happen, for example, if the computer account in Active Directory is manually removed and re-added, or if the client machine has been restored to an earlier point in time (machine account passwords are automatically changed every 30 days).
What worked for me was to reset the machine account password manually by executing Reset-ComputerMachinePassword
in an elevated(!) PowerShell:
PS> Reset-ComputerMachinePassword -Credential MYDOMAIN\SomeDomainAdminAccount
After rebooting (or disabling and re-enabling the network card, if you don't want to reboot), the (unauthenticated) note should be gone.
Run these commands on each computer with the problem:
netsh winsock reset catalog
netsh int ipv4 reset reset.log
netsh int ipv6 reset reset.log
Restart the PC then rejoin the computer to the domain.
Just remove the TLD from domain name and reboot, it will add it back after the reboot and all should be good.No fuss, no muss
ex: company.local remove the local and reboot, it will be added back after the reboot
I had the same problem and it turned out to be that a firewall between the pc and the DC was blocking 135,389, etc back to the pc.
To find that problem I ran Wireshark on the pc and did a gpupdate /force
. In wireshark I saw a bunch of syn packets going out to the DC with no response.
Once the firewall was fixed, we rebooted the pc and it was able to contact the DC properly and the problem was solved.
Sounds like something messed up the trust between the computer and the domain. You should try removing the computer from the domain, and readding it.
It's hard to say why this happened. Are there any error messages in the event logs on the DC now or around the time this started occurring? Were any network changes made?