We have a simple domain for some servers, with a single domain controller "APP01", and another member server "APP02"
For an unrelated reason, one of our services on APP02 fails and needs restarting, but this fails due to a credential problem. It looks like that after some time, the member server looses its connection to the domain, and can no longer authenticate.
If I look in the service properties to see what user account it's logging in as, it is set to [email protected] with the correct password, and shortly after a reboot that validates okay and the service starts. Once the server is in "failure mode", I can no longer browse the domain for users, and the "Locations" screen now only shows APP02 as an option, and the "entire directory" option is missing - almost as if this was a standalone server.
Oddly, if I browse to \APP01\MyShare, I get prompted for credentials and login is successful if I enter the service username and password.
LAN Manager Authentication Level
policy is set low or Extended Protection is suppressed, NTLM auth reqs can still succeed