Some users unable to log into domain.



Testing to slowly move over 40-50 computers to a domain.. but only
dealing with one XP box other than the server for now.

Anyway, I am able to log into the domain on my PC, using one username.
(No roaming or managed profiles), and experience no problems. The
security is just as it should be.

Now, I want to log into this same PC with one of the higher-access
accounts(as well as the domain's admin account itself), and it fails
under the error message

'Cannot log you in now because the domain <DOMAIN NAME> is not
available'

This is strange for a few reasons, mainly:
1) I can switch back to the reduced access account and it does work
fine.
2) Ive tried two logins featured under the domain admins group, as well
as added these individual user accounts to the access of this computer
[I did create an entry for this PC in an OU titled desktops] just
incase there was a problem with the domain admins group, and do no
avail.
3) I removed these users from alternate groups, on the chance that
another group which they were in would diminish their status as a
domain admin for some reason.
4) I confirmed that this user has full logon times, and 'Log On To...'
is set to allow connections to all computers.



I'm completely lost at this point. The only other security option I
attempted to enable was "deny log on locally" which I disabled.Any help
is appreciated....

.



Relevant Pages

  • Re: NT4->2003 Computer Account Migration Problem
    ... win2k3 domain, domain admin is by default the computer's local admin. ... and remigrate the computers using a specific account to perform migration ... Add NT Domain Admin to Win2k3Dom Domain admins group and Win2k3Dom ...
    (microsoft.public.windows.server.migration)
  • Re: Domain user with local administrators right
    ... domain account to the domain admins group, this is in turn a member of the ... with this domain account (selecting the domain from the drop down box under ... If the server is a domain controller, then there is no local administrators ... group so membership of domain admins should suffice. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Administrators Group in Local Users and Groups
    ... I have verified that an Account Operator can indeed log into a DC. ... I imagine adding themselves to the domain admins group would require a trick ... add your self to the local administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: Some users unable to log into domain.
    ... only one account login is able to currently ... If one login was able to contact the domain, ... Ive tried two logins featured under the domain admins group, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Right to add computers to a domain
    ... Domain Admins group? ... the right to join computers to a domain. ... It all began with Adam. ...
    (microsoft.public.windows.server.security)