Hi,
This error can be quite frustrating.
Here are a few steps you can try to resolve it:
- Check Domain Controllers: Ensure all Domain Controllers (DCs) are functioning correctly. Run
Dcdiag /v
on each DC to verify their status1.
- Secure Channel Verification: On the affected client machines, run
nltest /sc_query:domain.com
to check the secure channel status between the client and the domain controller1.
- Group Policy Objects (GPOs): Test with a user account that has no GPOs applied to see if the issue persists1.
- Event Viewer Logs: Check the Event Viewer on both the client machines and the DCs for any related errors2.
- DNS Settings: Ensure the DNS settings are correctly configured on the client machines2.
- ADSI Editor: As a workaround, you can use the ADSI editor to reset the password policy attributes (complexity and minimum expiration) to 0, then restart the system2.
Is there anything else you'd like to know or any other issues you're facing?