Unable to set a domain user account as a logon account for a Windows service - WKB91497

SYMPTOMS

• The message "Access is denied" appears when attempting to set a domain user account as a service account
• NETLOGON errors and messages similar to "unable to establish a trust relationship between this computer and the domain controller" appear in the Windows event logs
• User account SIDs appear in place of, or in addition to, domain user/group names in the Windows Users and Groups control panel

ENVIRONMENT

• Windows Server 2016
• Windows Server 2012
• Waters Software (NuGenesis, Empower, UNIFI, etc.) is installed on a Windows server in a domain environment

CAUSE

The password for the machine's account in the domain has expired.

FIX or WORKAROUND

1. Remove the machine from the domain.
2. Add the machine back into the domain. This act re-establishes the computer's account in the domain and resets its password.

ADDITIONAL INFORMATION