"Enabling" an already enabled user account?

Hi,

I'm running a fairly small domain, and have an issue I can't resolve.

I've got a user that tries to access a shares\printers on one of the
domain controllers. She gets the error "Logon failure: account
currently disabled." I look in the AD Users and computers and her
account is active. When I point her to a 2nd DC she can connect with
out issue.

I've tried actually disabling the account and then re-enabling and with
no change? The event log has nothing specific to the cause, just some
symptomatic stuff like it can't process GPO. The only difference
between the the day she could log in and the next when she couldn't is
that several Office product updates occured that night.

I should mention that other users can log into the affected workstation
and then connect to the shares on both DCs with out incident.

Does anyone have any ideas?

Thanks.

.

Relevant Pages

  • RE: Scavanging retired machine accounts
    ... Here's a script I wrote a while back that does exactly what you want. ... 'pull back a list of every user's account name and distinguished name ... we're probably only interested in the disabled computer accounts ... 'There is no point disabling PCs based on how many weeks it's been since the ...
    (microsoft.public.windows.server.scripting)
  • Re: "Enabling" an already enabled user account?
    ... Is that user having problems in all machines or just that one? ... (Logon failure: account currently disabled. ... see Help and Support Center at ... > I've tried actually disabling the account and then re-enabling and with ...
    (microsoft.public.windows.server.active_directory)
  • RE: Why should we disable local administrator accounts?
    ... I understand that you have concerns on disabling local Administrator ... Account on client workstations in SBS domain. ... At least if your local admin passwords are ...
    (microsoft.public.windows.server.sbs)
  • Re: "Enabling" an already enabled user account?
    ... ASF Gigabit Ethernet Controller ... I logged onto the account using another machine ... Windows cannot access the file gpt.ini for GPO ... I've tried actually disabling the account and then re-enabling and with ...
    (microsoft.public.windows.server.active_directory)
  • Re: "Enabling" an already enabled user account?
    ... I see that you've the DNS in different subnet, if you're running the logon script at site level with slow connection you probably miss that unless you force it through GPO. ... I logged onto the account using another machine ... >>> I've tried actually disabling the account and then re-enabling and ...
    (microsoft.public.windows.server.active_directory)
Loading