- Windows Error The Target Account Name Is Incorrect
- Windows Error Target Account Name Is Incorrect Deposit
- Windows Error Target Account Name Is Incorrect Mapping Drive
Error: Target account name incorrect connecting to DC after authoritive restore of OU. DC from another DC or connect to SERVER1 I get the message that the target account name is incorrect. The error message is “Target account name is incorrect”. Below some facts about the problem and some things i’ve tried allready to solve it. – I migrated te shares to another server running win2k8. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. Code Error; 0: No error: 1: User initiated client disconnect. 2: User initiated client logoff. 3: Your Remote Desktop Services session has ended, possibly for one of the following reasons: The administrator has ended the session. The target name used was cifs/. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using.
-->This article provides a solution to an issue where users fail to access a share on a file server that is running Windows Server 2012 R2.
Original product version: Windows Server 2012 R2
Original KB number: 3040803
Symptoms
When domain users try to access a share on a file server that is running Windows Server 2012 R2, they cannot access the share, and they receive the following error message:
Logon failure: Target account name is incorrect.
Additionally when this problem occurs, Event ID 4 and Event ID 1097 are logged in the Server log. This problem may occur for several hours or up to a day. Then, the user loses access to the share on the server.
Event ID 4
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server_name$. The target name used was server_name$. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (DNS_prefix.dns_suffix) is different from the client domain (DNS_prefix.dns_suffix), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Event ID 1097
The processing of Group Policy failed. Windows could not determine the computer account to enforce Group Policy settings. This may be transient. Group Policy settings, including computer configuration, will not be enforced for this computer.
Cause
This problem occurs because the file server cannot decrypt the ticket that was encrypted in AES256.
Resolution
To resolve this problem, set the value of the SupportedEncryptionTypes attribute to 0x7fffffff. To do this, follow these steps:
- In the Group Policy Management Console (GPMC), expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then select Security Options.
- Click to select the Network security: Configure encryption types allowed for Kerberos option.
- Click to select the Define these policy settings check box and all six check boxes for the encryption types.
- Click OK, and then close the GPMC.
Note
This policy sets the SupportedEncryptionTypes registry entry to a value of 0x7FFFFFFF. The SupportedEncryptionTypes registry entry is at the location: HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystemKerberosparameters.
Status
Windows Error The Target Account Name Is Incorrect
Microsoft has confirmed that this is a problem in Windows Server 2012 R2.
References
Background
Windows Server 2003 domain
Windows XP SP3 clients
Problem
Domain administrator is trying to access remote computer's file system via UNC administrative share e.g computer01c$
Operation fails with error:
computer01c$ not accessible you might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions.
Logon failure: The target account name is incorrect
Windows Error Target Account Name Is Incorrect Deposit
Solution
This issue is often caused by an incorrect DNS entry for the client computer on the DNS server. Sometimes it happens after computer is assigned a static IP address and DNS server still have a record for the old IP. Try accessing computer using its IP address. e.g. 192.168.1.105c$. If this works update computer's DNS record on your DNS server. Ensure that DNS server is functioning properly. 