| Event Id | 21174 |
| Source | security |
| Description | Agent Manager is unable to query the domain controller to determine if password updates have been disabled for computer accounts, and so has to verify each computer account by attempting to contact the corresponding computer. This information is stored within a registry entry on the Primary Domain Controller (PDC), and this event is caused by the Security Manager service account not having sufficient privileges to read the appropriate registry entry on the PDC. |
| Event Information | you must add the correct permissions to the PDC registry key as follows: Open regedit32 Drill down to the SYSTEM | CurrentControlSet| Services | Netlogon | Parameters key of the PDC. Click on Security in the menu and select permissions. Grant the Agent Manager service account Read permissions. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.