Re: Unable to logon(Critical)

From: Ace Fekay [MVP] (PleaseSubstituteMyActualFirstName&LastNameHere_at_hotmail.com)
Date: 09/03/04


Date: Fri, 3 Sep 2004 11:11:59 -0400

In news:544c01c49178$5b0da360$a501280a@phx.gbl,
chris <anonymous@discussions.microsoft.com> made a post then I commented
below
> Hi
>
> I am unable to login to the domain controller as a normal
> user.Now I am getting an error message "unable to locate
> profile,Access Denied" I checked all the security polcies
> and set as follows
>
> Active directory -------->logon locally >>Everyone
> Access this computer from n/w -
> Everyone
>
> Domain controller security policy also I configured as same
>
> Please Help me it's so critical
>
> Chris

This can also be a DNS issue. Let's try to eliminate that part at least. So
to ensure that you are NOT using your ISP's DNS addresses on any machines'
IP properties (DCs, member servers or clients), or this can cause numerous
errors, including what you are seeing.You must remove any ISP's addresses.
YOu can configure a forwarder for efficient Internet resolution. If the
option is grayed out, delete the Root zone. This article shows you how to do
that:
http://support.microsoft.com/?id=300202

Now once we establish that, we can dig further. Also check if there are any
Event log errors as well, on the client and on the server, and post the ID
#s and source please.

-- 
Regards,
Ace
Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.
This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
-- 
=================================


Relevant Pages

  • Re: SBS 2003 and TS-App Mode
    ... It's not secure... ... functionality over security and now you want functionality back. ... open and easy to use...they want TS on a domain controller back. ... Do not enable application server mode on a domain controllers. ...
    (microsoft.public.windows.server.sbs)
  • Re: Microsoft Security & Configuration Tool (MSCT)
    ... > install into the server become problem. ... How to undo the security configuration that I had already applied ... basicsv.inf is the Domain Controller Security Policy, ...
    (microsoft.public.security)
  • Re: SBS2003 and Terminal Services....
    ... SA loads so low in the TCP stack to not be an issue and protects the box ... Apply the Notssid.inf security template to TS running permissions ... Do not enable application server mode on a domain controllers. ... On Locally user right at the domain controller. ...
    (microsoft.public.windows.server.sbs)
  • Re: Security - Compromised!
    ... policy, no auditing/intrusion detection, etc. So I would say top things are ... to have properly configured firewall (test with external security scanner) ... Changes could have been made at domain or domain controller ... clean it would be time to run dcpromo on your new server. ...
    (microsoft.public.win2000.security)
  • Re: What files to watch??
    ... I'd be most interested in a copy of your scanner, ... We set up the Integrity Monitor on a workstation and a test server. ... >I'm trying to upgrade our security setup, and one of the things we didn't ... >Chris Berry ...
    (Security-Basics)