What Do I Do When a Fault Occurs After the SMP and AD Domain Controller Are Associated?

What Do I Do When a Fault Occurs After the SMP and AD Domain Controller Are Associated?

1. Fault Symptom

The SMP and Active Directory (AD) domain controller are associated. The authentication will fail when a user logs in by using an AD account and the following prompt is displayed in the authentication logs of the SMP:

The password of the computer RG-SMP-SERVER is incorrect.

2. Possible Causes

When the SMP and AD domain controller are associated, the PC account of the RG-SMP-SERVER needs to be added to the AD server. Otherwise, the SMP fails to associate with the AD domain controller normally.

3. Troubleshooting

Perform the following step to add the PC account of the RG-SMP-SERVER to the AD domain controller.

This step is a difficult step in deployment of the AD domain controller association because it involves the domain administrator or domain management account. There are three methods of registering a PC name and changing the password. Select a proper method based on the OS version of the deployed domain controller. Method 1 is applicable to Windows 2008 and later versions, method 2 is applicable to Windows 2003 and later versions, and Method 1 or method 2 is recommended.

No.	Deployment Mode	Domain Controller Type	Deployment Key Point	Recommendation Level
Method 1 3.2.3.1	A domain administrator creates a PC account and changes the PC password on the tool provided on the domain controller.	Windows 2008 and later versions (this method is applicable only to domain controllers of Windows 2008 and later versions. The ADSIEdit.msc tool is unavailable on Windows 2003, and the PC password cannot be changed even if the patch is installed).	1. Apply to the domain administrator for a common domain user account for SMP and AD domain controller association, for example, smpadmin/ruijie_2014. 2. Apply to the domain administrator for a PC account, for example, RG-SMP-SERVER. 3. Instruct the domain administrator to change the registered PC password on the ADSIEdit.msc tool provided on the domain controller. Note that the changed password needs to be consistent with the password of the association account (smpadmin).	Recommended
Method 2 3.2.3.2	The domain administrator creates a PC account on the domain controller and asks a common user to change the password.	Windows 2003 and later versions	1. Apply to the domain administrator for a common domain user account for SMP and AD association, for example, smpadmin/ruijie_2014. 2. Apply to the domain administrator for a PC account. During registration, when selecting the option that the following users can add the PC to the domain, add the preceding common domain account smpadmin. 3. On any PC added to the domain (or add SMP to the domain), use the approved common domain user account to log in to the device and run the .vbs script for changing the PC account password. The entered password needs to be consistent with the password of the associated account (smpadmin) during script running.	Recommended
Method 3 3.2.3.3	The domain administrator creates a PC account and runs a script to change the password on the domain controller.	Windows 2003 and later versions	1. Apply to the domain administrator for a common domain user account for SMP and AD association, for example, smpadmin/ruijie_2014. 2. Apply to the domain administrator for a PC account for registration on the account controller. 3. Instruct the domain administrator to run the .vbs script for changing the PC account password on the domain controller. The password entered during script running needs to be consistent with the password of the association account (smpadmin).	Not recommended