Logon Failure: The target account name is incorrect.

Fardringle

Diamond Member
Oct 23, 2000
9,200
765
126
I apologize that this initial post will be lacking some details but I want to get it started to see if anyone has any suggestions before I am able to actually physically access the server in question.

I want to preface this by saying that I don't normally do much with servers. I primarily support desktop systems and physical/wireless networking, but I was "elected" to be the tech guy for this small office mainly because my wife and her sister both work there. I can usually handle the infrequent problems that come up, but I don't have any idea where to even start with this one.

A small office consisting of about 20 Windows 7 Professional workstations connected to a Server 2012 Standard R2 server in a domain. This server replaced an old SBS 2003 server about two months ago. Everything has been working great up until today. Now all workstations on the network are unable to access any shared resources on the server including shared network printers. When attempting to access their mapped network drives (or directly access any \\servername resources) they get an error message that says "Microsoft Windows Network: Logon Failure: The target account name is incorrect." The network drives are mapped automatically by the login script to \\servername\sharename (with the correct info for the appropriate shares and drive letters). Shared printers all show as "offline" on the workstations.

I have found quite a few reports of this error online, but the only suggested possible causes in any of those postings are that this is due to incorrect replication between multiple servers on the domain and to repair the replication process. But this is the only server in this office so there isn't any replication involved.

Nothing has been changed on the server in at least a month (I installed some Windows updates then) and nobody knows the server admin password except me and my wife, and she hasn't touched it at all since it was set up. She only has the password in case of emergency.

I have LogMeIn installed on the server so that I can easily access it remotely as needed since I don't actually work in that office, but when I enter the credentials to connect to LogMeIn, the system says "Invalid username or password. Verify and try again." even though the credentials are definitely correct. This happens whether I use the normal working admin account or the built in Administrator account. I'm not certain that this is related, but I did first notice the problem when I tried to log in to the server to find out why the users were getting the target account name errors.

I discovered that I can successfully map a network drive and access the contents of the drive from the workstations if I use the server's IP address instead of the UNC name, and that is a partial and temporary fix, but not a real resolution since some of their programs rely on the UNC name and it doesn't really fix the root cause of the problem.

Any ideas what might be causing this, and how to fix it? Or anything I should look for when I am able to get to the office and have physical access to the machine tomorrow?
 

mikeymikec

Lifer
May 19, 2011
19,910
14,148
136
I would enable security auditing on the server for login failures and examine the results in the event viewer > windows logs > security log. You should get an error code which might point you in a more specific direction.

I'm trying to remember which security policy you need to alter on the server to enable that auditing, my guess is the DC security policy (rather than the domain security policy). If it has a local security policy, that might be the one to do.
 

Fardringle

Diamond Member
Oct 23, 2000
9,200
765
126
Interesting. I wasn't able to log in locally on the server either. It also said that the user names and passwords are incorrect, and the server rejected a remote shutdown request from a workstation logged in as a domain admin, so I had to force it to shut down with the power button. It restarted normally and logged in properly, then LogMeIn popped up a message saying that it had successfully installed an update.

So maybe the LMI update did something funky with the security/login procedure on the server? I can't imagine why it would do that or even WHAT it would be doing with that part of the system, but the server seems to be working fine now.