Quantcast
Channel: VMware Communities : Popular Discussions - VI: VMware ESX® 3.0
Viewing all articles
Browse latest Browse all 60069

Problems when reverting to snapshot with VMs part of a domain

$
0
0

 

Hello,

 

 

We are using many VMs for testing purposes, which implies the use of many snapshots, and reverting frequently.

 

 

When creating those VMs (Windows XP SP2), I make a "base" snapshot, with corresponds to the deployed template, plus sysprep and customization. Then I add it to our AD (Windows 2003), reboot, wait for the VM to receive the GPOs, stop it, and create another snapshot called "AD"

 

 

Finally, I deliver the VM to the end user (developper, packager, tester, etc.) who installs things, reverts to snapshot, etc.

 

 

At some point, one day, on a VM or another, logging in the domain becomes impossible, and the user gets an error message saying the domain is unreachable or the machine account was not found.

 

 

This type of message usually appears in VMs when a special GPO has not been set : Domain member : maximum machine account password age : 180 days  (This is our setting for the VMs)

 

 

When this is the case, the problem appears after about 30 days, since this is the default Windows setting for this GPO : After 30 days, the machine negociates a new password with the domain, and reverting to snapshot restores the previous password, which is incorrect. Thus the error message.

 

 

But this is not what we get. (We used to,before having created this GPO) What happens is that some VMs, sometimes, without any specific, recognizable pattern, either after a few days or after more than a month and a half, give the users the error message and I have to reenter the VM in the domain for it to work again. Before I do this, when I check the machine account in the AD, is seems fine.

 

 

 

 

 

Anyone has an idea about what is happening here ?

 

 

Thanks

 

 


Viewing all articles
Browse latest Browse all 60069

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>