Re: Unable to log on with a domain account

Tech-Archive recommends: Fix windows errors by optimizing your registry

Dups wrote:
Ok - I found something that seems to have worked. I thought I would post it in case someone else has this same problem in the future.

We went from the domain to a workgroup. Changed the computer name to something we never used before and never used to put on the domain. Rebooted. Added the PC to the domain with this new name that we never used in the past. Rebooted and now we can log in fine with an AD account.

"Dups" wrote:

I have a workstation that is on the domain. My colleague logged on this morning using his domain username and was able to log on fine. Eventually, the PC was lagging and he decided to do a reboot. After rebooting he was unable to log on with his domain user account. He would get the following error "Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or becuase your computer account was not found."

So, we tried two other AD accounts and the same error occurs. I spoke with an AD admin and we tried the following. I had him flush the computer account from the domain controller. On the PC we removed the PC from the domain and added it to a workgroup. Did the required reboot. Logged on. I had the AD admin add the computer to the domain using the same computer name that he previously flushed. He authenticates the addition of the PC with the domain controller. It gives the welcome to the AD domain message and asks for us to reboot. So at this point it obviously has the ability to communicate with a domain controller.

I reboot after adding the computer to the domain and try logging on with my AD account. Same error.

I verified the local admin group and our AD accounts are in that group. I even removed my name and re-added my name to the group. That had no problem. Once again showing that it can communicate with the domain controller.

So basically I can do anything minus log on to the computer using AD accounts.


Anyone have any ideas? I'm baffled.

You may not have waited long enough for AD to completely delete the account. Do you have more than one DC?

I usually wait at least 15 minutes to let all the DCs replicate the changes.

--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services
.

Relevant Pages

  • Re: Local Policy Database - failed to save
    ... > workgroup - the domain doesn't show up. ... automatically visible in the network browser. ... > The account is not a domain account, ... >>> There is a domain controller in the network, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: problem with win2000 please help
    ... Reboot and start tapping the spacebar, ... Reboot and get online if possible to run an Online Security and Virus check. ... and d/l and install Belarc Advisor. ... Administrative account should be left to get you out of trouble. ...
    (microsoft.public.win2000.general)
  • Re: Windows cannot connect to the domain - what worked for me
    ... You'll need more than just deleting the DC account from Domain Controllers ... Transfer (if not possible than seize) all roles that the older server had. ... Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller ... just for safety sake (no reboot), rejoined the domain & then rebooted. ...
    (microsoft.public.windows.server.active_directory)
  • Re: XP account passwords change spontaniously
    ... You could hard reboot the computer using the reboot button on the front of ... You can also use rsop.msc on the XP Pro computer to ... Also I would be sure to change the administrator passwords on ... >> the administrator account in XP Pro which will only allow it to be logged ...
    (microsoft.public.windowsxp.security_admin)
  • Re: hard drive
    ... I rebooted using a restore disk that i received when i bought my computer a few years ago ... The reboot went fine but i cant access any of the files from my old user account, yet all of the other accounts are fine. ... Ron Martell Duncan B.C. Canada ...
    (microsoft.public.windowsxp.perform_maintain)