Forum Discussion
MDT - Domain administrator account locks during TS
Hi folks,
I am facing a strange behavior during the execution of my MDT task sequence. I've noticed that the default domain administrator account keeps locking out while I run a task sequence to stage my desktops.
I do not use this account during my task sequence nor connecting to the Deployment Share. I've created a specific user account with limited rights to access deployment share, and so on.
After some research i've found out that it can be related to the autologon instructions within the "unattend.xml" file and that the system (for unknown reason) tries to authenticate with the "domain\administrator" account instead of the "computer\administrator" account.
I've checked the "unattend.xml" file and the "." is indicated as domain within the "<domain>" tag under the "<autologon>" tag section. Therefore i do not understand why the task sequence tries to auto logon with the domain account...
My task sequence is creating the Active Directory computer object in a folder called "MDT" under the "dc=<domain>,dc=<tld>" path. Therefore the "Default Domain Policy" Group Policy is applying on this OU. The GPO contains settings that are locking users object accounts after 10 unsuccessful passwords (explains why the domain\administrator therefore locks up).
Can anybody brings me some explaination on this ?
Thank you !