none
AD Account Properties disappear/empty

    Question

  • Hi Forum

    Odd issue that seems to be intermittent. Happens on some accounts and not on others.
    Almost like the change is never picked up. Can anyone advise please?

    Scenario:
    1
    Create new exchange email account from Exchange Management Console.

    2
    Active Directory Users and Computers, locate the user, then proceed to enter the relevant information, e.g. Office, Telephone etc.
    Clicked Apply, then ok

    3
    Log on as new user and setup outlook. Logged off.  

    4
    Tried to logon next day and message stated “user or password incorrect”.

    5
    Active Directory Users and Computers, locate the user, to change the password, the general Tab is blank, check all the other tabs and all the information I added as per (2) above was missing.

    6
    Re-add the information, applied and ok.
    This is fine.

    Thanks in advance

    NN


    Monday, February 20, 2017 9:39 AM

Answers

  • This worked out a charm:

    https://blogs.technet.microsoft.com/askpfeplat/2012/03/05/how-to-track-the-who-what-when-and-where-of-active-directory-attribute-changes-part-i-the-case-of-the-mysteriously-modified-upn/

    Thanks to Ray Zabilla and Rick Bergman, Microsoft PFE.

    NN

    • Marked as answer by Naked Nuts Monday, February 20, 2017 4:44 PM
    Monday, February 20, 2017 4:44 PM

All replies

  • I should note that the user is doing this all from Admin Tools.

    AD Replication is fine. No issues.
    • Edited by Naked Nuts Monday, February 20, 2017 2:45 PM
    Monday, February 20, 2017 9:42 AM
  • Did you recently remove a domain controller from your network, and if so, was it removed properly?  Or were there any IP or DNS changes recently made regarding your to domain controller?  Start by checking the DNS settings on your client machine, then run some Active Directory health and replication checks in your environment.  Run the commands on the DCs themselves.  Arguably, the three most popular commands for this are:

    dcdiag /v
    netdiag /v
    repadmin /replsum

    Also take a look at the following:  Active Directory Health Checks for Domain Controllers



    Best Regards, Todd Heron | Active Directory Consultant

    Monday, February 20, 2017 2:51 PM
  • Hi Todd

    Thanks for getting back to me. AD health check was run and there are no issues from what I can see.

    Its very odd. I haven't seen the issue first hand myself, but I cant think what else it could be.

    6 DCs all appear healthy.

    Kind regards

    NN

    Monday, February 20, 2017 3:54 PM
  • Im gonna pull the objmetadata and see if I can pinpoint any changes.
    Monday, February 20, 2017 4:26 PM
  • This worked out a charm:

    https://blogs.technet.microsoft.com/askpfeplat/2012/03/05/how-to-track-the-who-what-when-and-where-of-active-directory-attribute-changes-part-i-the-case-of-the-mysteriously-modified-upn/

    Thanks to Ray Zabilla and Rick Bergman, Microsoft PFE.

    NN

    • Marked as answer by Naked Nuts Monday, February 20, 2017 4:44 PM
    Monday, February 20, 2017 4:44 PM