Re: Some users unable to log into domain.



It may have been working in the past and now it isn't. I would really
suggest you look into your DNS integrity. For some reason that computer
cannot contact your domain controller upon login. In MMC(the DNS snap-in)
right-click on your server then choose properties-->Monitoring Tab-->run
those tests. I would also direct you to check the MS site for some DNS
troubleshooting docs. There are tons of them (I had to fix mine a while
back).

-Steven-
"quilty" <gtouss@xxxxxxxxx> wrote in message
news:1150736922.263189.208110@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Actually, it is not. As of now, this is the only desktop which has
joined the domain, which I am using to test. As it stands now (through
some more investigation), only one account login is able to currently
access the domain, and all other accounts receive the same error
message.

If one login was able to contact the domain, why wouldn't another be
able to from the same rig?

Thanks,
Gerard
Steven Platt wrote:
It just means that it can't contact the domain controller to
authenticate.
The reason you can login with that other user is probably because at one
point the computer could contact the domain controller and authenticate.
When you authenticate for the first time, by default, Windows will cache
the
login information. Hence, even if the computer cannot contact the domain
controller it will still login. Is this computer in question perhaps a
wireless computer?

-Steven-
"quilty" <gtouss@xxxxxxxxx> wrote in message
news:1150734401.323372.243320@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Testing to slowly move over 40-50 computers to a domain.. but only
dealing with one XP box other than the server for now.

Anyway, I am able to log into the domain on my PC, using one username.
(No roaming or managed profiles), and experience no problems. The
security is just as it should be.

Now, I want to log into this same PC with one of the higher-access
accounts(as well as the domain's admin account itself), and it fails
under the error message

'Cannot log you in now because the domain <DOMAIN NAME> is not
available'

This is strange for a few reasons, mainly:
1) I can switch back to the reduced access account and it does work
fine.
2) Ive tried two logins featured under the domain admins group, as well
as added these individual user accounts to the access of this computer
[I did create an entry for this PC in an OU titled desktops] just
incase there was a problem with the domain admins group, and do no
avail.
3) I removed these users from alternate groups, on the chance that
another group which they were in would diminish their status as a
domain admin for some reason.
4) I confirmed that this user has full logon times, and 'Log On To...'
is set to allow connections to all computers.



I'm completely lost at this point. The only other security option I
attempted to enable was "deny log on locally" which I disabled.Any help
is appreciated....




.



Relevant Pages

  • Re: Computer used by multiple users, same login
    ... If those types of objections didn't apply, I see no reason not to do exactly ... account more access than you intend, I'd go ahead and do it. ... without access to sharepoint, I create it the conventinal way (not using ... This user account will be setup to only login into this PC ...
    (microsoft.public.windows.server.sbs)
  • Re: Some users unable to log into domain.
    ... I think you might be onto something, as I realized that I can ping the ... I'm a little iffey as to how the DNS was supposed to be setup. ... cannot contact your domain controller upon login. ... only one account login is able to currently ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cant log in
    ... KOOJ wrote: ... > account in your domain. ... What would be a reason for that user not being able ... > to login at his/her computer, and how do you fix it. ...
    (microsoft.public.win2000.general)
  • Re: XP updates <Turn off auto update>
    ... A good reason to disble auto update, ... Login is asking for a password for an account ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Adding server/PC to a Win2003 domain
    ... I checked the DNS and there was one error but probably not the reason. ... Do you know this error and is my link correct with the bad disk error. ... >> account, so I named the new computer to that old account and renamed it after ...
    (microsoft.public.windows.server.active_directory)