Re: Domain users unable to log on domain workstation

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jerold Schulman (Jerry_at_jsiinc.com)
Date: 10/25/04 

Date: Mon, 25 Oct 2004 06:50:51 -0400

On Mon, 25 Oct 2004 10:40:27 +0800, "Jeremy Sun" <binmann@hotmail.com> wrote:

>>From time to time, there are computers that no users are able to logon.
>
>Domain admins or local admins are able to logon, however domain users do
>not. Reboot does not fix the problem. Disjoin domain and then rejoin domain
>solves the problem.
>
>Sometimes the security log in DC shows that the computer account has a false
>password. Other times there are no log at all.
>
>It occurs randomly, or at least it looks random to me.
>
>Out of the 200~ computers, we usually find 1 computer or 2 having the
>problem every week. Sometimes it is the same computer, sometimes it is a
>computer that never has had the problem.
>
>Any clues? Anyone having the same experience? Is there anyway to solve it?
>Any workaround? Is there a way to know which computer(s) is having the
>problem instead of waiting for the users to report the problem when the time
>is most critical?
>
>Is it possible that the computer account is locked out? Anyway to check if
>this is the case?
>
>Regards,
>Jeremy
>

See tip 3607 and link in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

Relevant Pages

  • Domain users unable to log on domain workstation
    ... there are computers that no users are able to logon. ... Domain admins or local admins are able to logon, ... Sometimes the security log in DC shows that the computer account has a false ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain users unable to log on domain workstation
    ... there are computers that no users are able to logon. ... >>Domain admins or local admins are able to logon, ... >>Sometimes the security log in DC shows that the computer account has a ... >>Is it possible that the computer account is locked out? ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain Users group does not retain the Log on Locally right
    ... successfully completed but after the updates the Domain Users disappeared. ... Users" were not members of the "Log on Locally" policy. ... computer account from AD and then readding the computer account then ... workstations and it does add Domain Users to the Lo on Locally policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: SMS_LAN_SENDER 3530 when installing Secondary site
    ... Did you reboot the sms server after adding it to the domain admins ... User access tokens are built during logon, ... > the computer account when I create the ...
    (microsoft.public.sms.setup)
  • Re: How secure is this?
    ... Second - you have done nothing to keep Domain Users ... you have only taken steps against Domain Admins. ... > Disable File and Printer sharing ... > Disable Computer Browser service. ...
    (microsoft.public.windowsxp.security_admin)