Bug ID 984765: APM NTLM auth fails every week with RPC return code 0xC0000022(STATUS_ACCESS_DENIED)

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM, Install/Upgrade(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 16.0.0,, 16.0.1,,, 17.0.0,,

Fixed In:
16.1.0, 15.1.4,

Opened: Jan 19, 2021

Severity: 3-Major


NTLM User logon authentication fails every week with RPC return code 0xC0000022(STATUS_ACCESS_DENIED) from the Active Directory (AD) server.


NTLM Authentication fails after a week. APM end user client logon (such as Outlook users, Remote Desktop Users, and Browser-based NTLM Auth logons that use BIG-IP APM as forward/reverse proxy) fails, and the service is down.


-- Upgrading from legacy versions to BIG-IP v14.1.2 or later. -- AD servers are updated with latest security patches from Microsoft.


To resolve the issue temporarily, use either of the following: -- Reset the NTLM Machine Account with the 'Renew Machine Password' option. -- Run the command: bigstart restart nlad The problem can reappear after a week, so you must repeat these steps each time the issue occurs.

Fix Information


Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips