Windows Local Account Related Issues
The table below outlines most common errors when adding Windows local accounts, along with their recommended solutions.
Issue | Error Code in Logs | Description and Possible Solution |
|---|---|---|
Unable to add account | NT_STATUS_ACCESS_DENIED, but LANMAN password changes are disabled. | Users need to be added to "Local Security Policy --> Local Policies --> Security Options --> Network Access: Restrict clients allowed to make remote calls to SAM" settings on target Windows Server |
Unable to add account | Failed to open connection - NT_STATUS_CONNECTION_RESET | Check network connection between Kron PAM and target Windows Server |
Unable to add account/unable to reset account | Permission error | Local User Policies are managed within the Local Security Policy context. These policies are often examined when troubleshooting password restriction errors. A common issue involves password validity periods, which can prevent users from setting or updating passwords as expected. |