The target account name is incorrect

Can’t access a resource on a failover cluster : Logon Failure: The target account name is incorrect

July 17, 2013 Leave a comment

If you a running a Windows 2012 failover cluster and you tried to access the resource by using a resource name from a Windows XP-based or Windows Server 2003 computer, you will receive the following error message:find the following issue:

is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions. Logon Failure: The target account name is incorrect

This issue occurs because the rc4-hmac keys on the Domain Controller and the cluster side for the virtual computer object (VCO) are different. The ticket decryption fails when the ticket is encrypted by using the rc4-hmac encryption. Additionally, the cluster becomes unavailable for any computer that uses the rc4-hmac keys.

Note: This applies to Windows 8 and Windows 2012 Fail over cluster and as per Microsoft advise it can impact Hyper-V deployments where the CNO password gets out of sync and you can no longer do Live Migrations.