Skip to main content
AD Academy
Back to all events
5722System (DC)Replication & DCsWARNLast updated:

Secure channel setup with a machine account failed

What it means

The computer account password does not match. Typical after restoring an old snapshot or with a duplicate machine name.

When it is normal and when it is suspicious

Never really normal. Usually a machine restored from an old snapshot, or a host powered off for over 30 days.

First steps

  1. 1On the machine: Test-ComputerSecureChannel -Verbose
  2. 2Repair without rejoin: Test-ComputerSecureChannel -Repair -Credential (Get-Credential)
  3. 3Never restore DCs or servers from old snapshots — the usual root cause.

Fields worth checking

FieldWhat to look at
Computer accountThe failing host. Find it in AD and check pwdLastSet.

Related events

This reference is a starting point for investigation, not a replacement for your organisation's security policy.