PENDING domain join account breaks every 2-3 weeks

[michalfira]

Hi
I have an issue with SCCM domain join account where it doesn't join computers to the domain during OSD. I mean when I configure domain join user account in AD and assign proper permissions configure it in Task Sequence and deploy system it works for some time and then for some reason it breaks - it doesn't join compuers to the domain anymore. User account is still good, password set to never expire. I can log on to any machine using that account. I even cloned domain admin and it worked for 2-3 weeks and then it broke. I have 3 other SCCM deployments where I deployed SCCM at the same time as the problematic one, so settings are the same (except Site name and location - different customers) and there is no problem with domain join account. Just one customer doesn't work properly. I have to create new domain join user account once a month. Looking for some advice where to look for errors.

 

[Prajwal Desai]

Does that mean the domain join account password is being reset often ?. If you reset the password and update the TS, does the domain join work ?.

 

[michalfira]

That's a problem - I don't touch domain join account at all. Password is set to never expire. Account is not being used for anything but SCCM domain join. When I notice that it doesn't join new computers to the domain and I reset the password and change it in TS it still doesn't work. I have to create brand new domain join user account in AD and update TS. Then it is good for couple weeks - usually it doesn't last longer than 1 month. The other customers with exactly the same settings are totally fine (I deployed 4 SCCM sites for 4 different customers within a month - they have exactly the same SQL, SCCM, Windows OS 2016).
Thanks

 

[michalfira]

Any thoughts on the topic?