Netlogon error 5719 - done all the usual checks

[m0bov]

Hi all, whilst troubleshooting something else, we noticed on our current and newly installed machines we are getting Netlogon 5719 errors when the PC is started up. We have tried the following:

Restarting netlogon after log in, get the error

pinging our two DCs, all ok

nslookup of the FQDNs all ok

Full windows up

Used AI to troubleshoot, disabled the credential guard via the registry

Ran test-computersecurechannel came up true

Reset the channel, true

Did verbose no errors

klist, shows tickets

Checked SPNs, no issues

time sync ok

Checked I had KB5055523

 

Took PC off domain and re attached, same error

PC is getting GPOs and logging in ok

 

No errors on the DCs.

 

Enabled netlogon log, found but not sure if this is a real fault or not. I can ping the domain. Any ideas????

 

NlSessionSetup: Denied access as we could not authenticate with Kerberos 0xC002002E
...
NlSessionSetup: Denied access as we could not authenticate with Kerberos (translated status) 0xC00000E5
...
Eventlog: 5719 (1) "**domain-name**" 0xc00000e5

[Gumbyohson]

I am seeing the same at our customer. 2019 DCs with 24h2 Windows 11. I you try to login to the PC without network from an account you previously logged in as, does it complain about not being able to see the DC?

[m0bov]

Hi, no error message if I try that.

[Gumbyohson]

Did you restart the PC in between your first login and then disconnecting from the network to login again? Is the user account newish (ie has only existed on the PC since it was upgraded to 24h2 or did it exist on the PC before the upgrade?

 

Trying to see if this is the same issue I'm having.