Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

[Idea] Explain the "incorrect user name or password" error when the server and a computer share the same machine SID

Open
  • Is something wrong?
#126 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
50/100
Issue type
Documentation
Clarity
Clearly specified
Activity status
Active
Tech stack
csharp
Domain
authentication, documentation

Research direction

Start from the README troubleshooting section and the F1 help content, then look at where the Options > Credentials > Test error 1326 message is shown, since the issue quotes its exact wording. Confirm the cause in the issue's Security log description (event 4625, status 0xC000006D) before writing. Done means a short entry saying that a server and a computer must not share a machine SID and that cloned computers need sysprep /generalize, with the lockout risk noted. Agree the optional message hint with the maintainer before changing code.

Written by the indexing model from the issue text.

Description

The need

An administrator who builds the DeployCraft server and a test computer by cloning the same virtual machine or image (without sysprep /generalize) gets, in Options › Credentials › Test, "refused by PC-TEST-01: the user name or password is incorrect" (error 1326), even with the right password. Nothing points to the real cause, and the failed attempts count towards the account lockout threshold, so people keep retrying.

What was observed

  • The server and the computer had the same machine SID (the part of the SID before the final RID is identical).
  • DeployCraft's own Test button gave the message above with the original account. A brand new local administrator account, created seconds earlier with a known random password, was refused the same way, both by net use \\PC-TEST-01\ADMIN$ /user:PC-TEST-01\account and by a script making the same calls as the credential test (LogonUser with LOGON32_LOGON_NEW_CREDENTIALS, then listing \\PC-TEST-01\ADMIN$).
  • On the computer, each attempt left this signature in the Security log and nothing else: event 4672 (special privileges assigned), then event 4625 with status 0xC000006D / sub status 0x0, then event 4634, without any event 4624. A really wrong password gives 4625 with sub status 0xC000006A.
  • After reinstalling the computer from the Windows media (new machine SID), the same account and the same password worked on the first try, with net use and with DeployCraft.
Your idea
  • Add a short troubleshooting entry (README, help F1) saying that a server and a computer must not share a machine SID, and that cloned computers need sysprep /generalize.
  • Optionally, when the test of a local account fails with error 1326, add a hint to the message: "If this computer was cloned from the same image as the server, they may share a machine SID."
  • Optionally, show a warning when a credential is tested several times in a row, to avoid the lockout.
Current workaround

Reinstall the computer from the Windows media, or generalise the clone with sysprep so that it gets a new SID.

— chromozone21 (written with Claude Code)

Dominant language
C#
Stars
0
Forks
1
Avg merge
4h 38m
Merged PRs (30d)
87

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from vzeol/DeployCraft

All issues in vzeol/DeployCraft

Similar issues

More C# issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.