ACS Machine Authentication Fails Every 30 Days

[TOM FRANCHINA]

Running ACS5.2, Windows XP Pro, Window Server 2003 and Cisco Anyconnect Client. When the machine name password changes between the PC and the AD server the ACS will error out with "24485 Machine authentication against Active Directory has failed because of wrong password"

TAC has been working with us on this and sees the error in the logs but does not have an answer on with to do to solve this. It has the same problem with Wireless Zero.

Once the PC is rebooted the error goes away for 30 days. We are in a hospital setting so this is a not just a minor problem

[TOM FRANCHINA]

So it looks like this is the offical Microsoft answer:

Hello Tom,

I had a discussion with an escalation resource on this case and updated him on what we found so far, From what  I understand this is a known issue when the client is using PEAP with computer authentication only  and the workarounds to this problem are the 2 solutions lined up in that article that I sent you.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;904943

Regards

Krishna

[ThibaultMean]

Many thanks for the heads up.

We need to test this in our lab now.

Will keep you posted.

Thibault.