windows disk protection and AD computer accounts
Where workstations are joined to a domain, the computer account (secure channel) password changes every 30 days by default.
I think this is affecting things in a strange way. The workstations will be fine and working on the network until you switch diskprotection off. Then their computer account in active no longer works and they are not ‘properly’ joined to the domain.
I going to try changing the following setting to see if it helps…
(choose a) policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Domain Member: Disable Machine Account Password Changes
