This message was deleted.
# citrix-vads
Slackbot
07/26/2020, 6:58 PMThis message was deleted.
n
Nathan Shaw
07/27/2020, 7:43 AMNothing out-of-ordinary with your MCS? Nobody messed with the disk file on your storage? Quite an odd error as MCS should be taking care of everything re clean cloning, domain join. If you’re stuck, I’d try building a new Machine Catalogue and see if persists.
Nathan Shaw
07/27/2020, 7:44 AMSomeone/thing else stealing your computer accounts in AD would explain it.
j
jvitech
07/27/2020, 8:40 AMI had similar issue, unexplained lost of trust for my Windows 10 1809. I end up enabling the GPO "Domain member: Disable machine account password changes" to fix the issue. It is not ideal in term of security but I didn't have the time to open a case with Citrix and I had the feeling it wouldn't go anywhere. Nothing was stealing my AD account, I believe something doesn't work in MCS. I use 7.15 CU4.
m
Mike Streetz (O_P)
07/27/2020, 4:14 PMif you use the same master image between multiple catalogs and move it around so that it connects to different domain controllers thius can happen when something doesn’t replicate correctly
a
Andrew Gresbach
07/27/2020, 4:16 PMthanks guys! we're still figuring this out here....we only have the 1 catalog for this group (different delivery groups though but shouldnt matter there). we do have 2 dc's in our production and 1 down in our dr site....not sure if that would matter
Andrew Gresbach
07/27/2020, 4:18 PMwe had something earlier in the spring where users in our non persistent environment every so often after 4:30 or 5 would loose their connection to any network resource and we found some post on the citrix discussions (hunting to find it again) where it suggested to change a domain policy that shortens an expiration of something from 30 days to 7 days which SEEMED to help there and i think this maybe started around then but maybe just a coincidence
Andrew Gresbach
07/27/2020, 4:33 PMthis is what we changed a ways back i just remembered (option 3)..not sure if it could play a part. https://support.citrix.com/article/CTX255423
Andrew Gresbach
07/27/2020, 6:22 PMstrangely enough we changed the kerberos maximum life like that ctx article suggests back in the spring from the 10hr default to 24 hrs but we still are showing 10hrs if we run klist on a client...not sure why it wouldnt change
s
Steve Noel
07/27/2020, 6:54 PMgetting any time drift?
a
Andrew Gresbach
07/27/2020, 7:47 PMnot that we've noticed but worth keeping an eye on
n
Nathan Shaw
07/28/2020, 9:19 AMRID exhaustion?
3 Views