Re: DHCP user gets Account Disabled error frequently


Dave Patrick wrote:
A little confusing. You mention "her account" which sounds like a user
account but later mention disjion/rejoin the pc to the domain which is the
computer account. DHCP in of itself would have nothing to do with either.
Might be the user joins it to another domain in the field?

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

The "her account" was referring to the user. She is mainly at 1
location, but does travel with her laptop to our other locations. She
can join the network fine at the other locations via DHCP, but is the
only one having trouble at this locale. The user only connects to our
network here, so it is the same domain regardless of what location she
is at. Each location has its own win 2000 server that acts as a file
server and a DC for that location due to slow communication lines. The
DNS/DHCP servers are configured exactly alike at each location.

By disjoining/rejoining occasionally the problem is solved and she is
fine until she travels and logs in at another location and then upon
returning to her main office she gets an error stating that her account
is disabled (and it is not in AD). Logging in locally as the admin and
disjoin/rejoin generally fixes it until the next time as I said. The
main problem is that all of our laptops here are WinXP Sp1 and this is
the only newer one that is SP2, and it is strange that it is only at
this location that we have this problem and only with this one laptop.
Other users go from building to building and never have login issues. I
did ensure that the SP2 firewall was off.

The other oddity is that while she cannot login to the network (gets
the error about the account being disabled) I can VNC into the laptop
via the hostname in DNS or the IP address just fine... so DHCP and DNS
has to be OK it would seem. This is a strange one, and has me pretty
stumped at this point. Any help is appreciated.

Thanks,
- DT

.

Relevant Pages

  • Re: DNS Server Refuses Updates from DHCP
    ... DHCP scope properties for the DHCP server to authenticate with the ... Is the only requirement for the domain account that runs DHCP that it ... enter a dedicated user account credentials. ...
    (microsoft.public.windows.server.dns)
  • Re: small test network help
    ... I meant delete the account on the server. ... laptop is the name of the ... > getting a valid IP address from the DHCP. ... The laptop is getting an IP address since i deleted the account and put it ...
    (microsoft.public.windows.server.networking)
  • Re: Windows DNS Server and non-microsoft clients
    ... properties, select the Advanced tab, click the Credentials button, ... enter the credentials for a dedicated user account that should ... is optional and is a security risk if you give the account to many ... I have found that if DHCP registers for even the Domain members that are ...
    (microsoft.public.windows.server.dns)
  • Re: DNS Server Refuses Updates from DHCP
    ... By default the memebers of the Authenticated users have the Permissions to create all child objects under Dns Zone, and this is one of other groups with less permissions defined by default in the Zone properties. ... I guess that if you don't want to take MS advise you can create another AD account and give that account permissions to create all child objects under the zone properties and that should be enough. ... Would there be any way to run the DHCP service ...
    (microsoft.public.windows.server.dns)
  • Re: DHCP security breach
    ... all authenticated users can create RRs in DNS zones. ... so if you configure your DHCP with a SIMPLE user account only ... important DNS records by preventing DHCP from rewriting them. ... ACL that this account must have on DNS zones. ...
    (microsoft.public.win2000.security)