Re: "Enabling" an already enabled user account?

Can you post here the results for ipconfig /all?
Is that user having problems in all machines or just that one?
Try to access \\domain.com\sysvol\domain.com
Group policies are not applied the way you expect; "Event ID 1058" and
"Event ID 1030" errors in the application log
http://support.microsoft.com/kb/314494/en-us


--

I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE

<jtgasper3@xxxxxxxxx> wrote in message news:1169496810.756605.276090@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thanks for the replies,

I've checked both DCs and there are no replication errors. In fact, I
can disable the account on one machine, connect to the other and what
it disabled, and then enable it from the 2nd and watch it enable on the
first.

The event log errors on the workstation are as follows:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 1/22/2007
Time: 11:56:13 AM
User: SUTTON\KSmith
Computer: XX29437D
Description:
Windows cannot access the file gpt.ini for GPO
CN={37E1E4C6-9EDB-4A04-99F6-F01159942766},CN=Policies,CN=System,DC=sutton,DC=XXX,DC=XXX.
The file must be present at the location
<\\sutton.ewu.edu\SysVol\sutton.XXX.XXX\Policies\{37E1E4C6-9EDB-4A04-99F6-F01159942766}\gpt.ini>.
(Logon failure: account currently disabled. ). Group Policy processing
aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 1/22/2007
Time: 11:56:13 AM
User: SUTTON\KSmith
Computer: XX29437D
Description:
Windows cannot query for the list of Group Policy objects. A message
that describes the reason for this was previously logged by the policy
engine.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 1/22/2007
Time: 11:57:41 AM
User: N/A
Computer: XX29437D
Description:
Automatic certificate enrollment for SUTTON\ksmith failed to contact
the active directory (0x8007052b). Unable to update the password. The
value provided as the current password is incorrect.
Enrollment will not be performed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Jorge Silva wrote:
Hi
Sounds like an replication issue, check which DC is the user authenticating
and look for replication errors.

--

I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE

<jtgasper3@xxxxxxxxx> wrote in message
news:1169493811.187410.297380@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> I'm running a fairly small domain, and have an issue I can't resolve.
>
> I've got a user that tries to access a shares\printers on one of the
> domain controllers. She gets the error "Logon failure: account
> currently disabled." I look in the AD Users and computers and her
> account is active. When I point her to a 2nd DC she can connect with
> out issue.
>
> I've tried actually disabling the account and then re-enabling and with
> no change? The event log has nothing specific to the cause, just some
> symptomatic stuff like it can't process GPO. The only difference
> between the the day she could log in and the next when she couldn't is
> that several Office product updates occured that night.
>
> I should mention that other users can log into the affected workstation
> and then connect to the shares on both DCs with out incident.
>
> Does anyone have any ideas?
>
> Thanks.
>


.

Relevant Pages

  • Re: Remote debugging from Vista to XP64
    ... these two machines for the local VS debugger and "Visual Studio Remote ... have you tried to use a domain account which are in the ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.vsnet.debugging)
  • Re: Security Vulnerability? or just an IT Admin oversight?
    ... The login user id is ... > Support link which from there I can then get Full Administrative access to ... I tried disabling the Help & Support service on the ... your account has permissions to perform. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: HOW DO I IMMEDIATELY FREEZE AN ACCOUNT?
    ... > immediately freeze all his account access. ... DISABLING AN ACCOUNT DOES ... > machines, he could be logged into a machine in some corner office ... > its a windows 2000 network. ...
    (microsoft.public.win2000.security)
  • Re: HOW DO I IMMEDIATELY FREEZE AN ACCOUNT?
    ... Hire someone to administer your network if you have 1000's of machines. ... DISABLING AN ACCOUNT DOES ...
    (microsoft.public.win2000.security)
  • Re: HOW DO I IMMEDIATELY FREEZE AN ACCOUNT?
    ... If you have managed switches on your network, ... DISABLING AN ACCOUNT DOES ... > machines, he could be logged into a machine in some corner office ...
    (microsoft.public.win2000.security)