[Solved] The Local Security Authority cannot be contacted

Today, one of my colleagues wanted to log on to a server and got this message.
An authentication error has occurred. The Local Security Authority cannot be contacted. This could be due to an expired password. Please update your password if it has expired.
Of course, the password was the right one and the account was not locked out.
(Fortunately, this issue did not prevent me to open a remote PowerShell session.)

As soon as I have an issue, my first reaction is to have a look at the event log. And here again, it was helpful.
The Remote Desktop Configuration service depends on the Workstation service which failed to start because of the following error: The dependency service does not exist or has been marked for deletion.
The RDP service did not start because a dependency, the Workstation service, could not start.
After watching at the Workstation service, I discovered a dependency named System.ServiceProcess.ServiceController.
LanmanWorkstation service System.ServiceProcess.ServiceController
This is because the system is unable to link the dependency to an existing object.
At this moment I remembered that we enabled SMBv1 on this computer because it has to communicate with a legacy equipment. A quick look at the registry confirmed this.
LanmanWorkstation DependOnService
As you can notice, the Workstation service was depending on SMBv1 protocol, which is listed as MRxSmb10.
The next step was to look at the installed features.
And here we found the root cause of the issue: the SMBv1 protocol was not installed.
FS-SMB1 not installed
We just had to install the protocol, restart the server, and everything was working fine again.
Of course, it would have been better to remove the dependency from the Workstation service of the SMBv1 protocol. However, while the legacy equipment still needs to communicate with this server, we must keep this protocol enabled.

More about SMBv1:

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s