NetLogon 3210 events are logged after MSA renews its password in Windows Server 2012 R2

Applies to: Windows Server 2012 R2 DatacenterWindows Server 2012 R2 StandardWindows Server 2012 R2 Essentials

This article describes an issue that occurs after the Managed Service Account (MSA) renews its password in Windows Server 2012 R2. You can fix this issue by using the update rollup in this article. 


When this issue occurs, the security channel connection to the domain controller is disrupted. And the system starts to report NetLogon 3210 events that look like this:Note To recover from this issue, you must restart the computer or restart the NetLogon service.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology that Microsoft uses to describe software updates.