Re: "Enabling" an already enabled user account?

I see that you've the DNS in different subnet, if you're running the logon script at site level with slow connection you probably miss that unless you force it through GPO.

--

I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE

<jtgasper3@xxxxxxxxx> wrote in message news:1169503109.219806.47520@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Jorge,

1) The IPCONFIG/ALL Output
Windows IP Configuration

Host Name . . . . . . . . . . . . : XX29437D
Primary Dns Suffix . . . . . . . : sutton.ewu.edu
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : sutton.ewu.edu
ewu.edu

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8050 PCI-E
ASF Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-13-20-12-B7-6B
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 146.187.13.XXX
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 146.187.13.1
DNS Servers . . . . . . . . . . . : 146.187.224.9
146.187.216.3

2) I logged onto the account (roaming profile) using another machine
and it is also having the same problem.

3) I am able to connect to the sysvol share of the domain dfs. I am
able to connect to other DFS shares as well.

Interestingly enough, the %LOGONSERVER% on one of my logins was the
affected server, although it has used the other server also.

Thanks,
John

Jorge Silva wrote:
Can you post here the results for ipconfig /all?
Is that user having problems in all machines or just that one?
Try to access \\domain.com\sysvol\domain.com
Group policies are not applied the way you expect; "Event ID 1058" and
"Event ID 1030" errors in the application log
http://support.microsoft.com/kb/314494/en-us


--

I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE

<jtgasper3@xxxxxxxxx> wrote in message
news:1169496810.756605.276090@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Thanks for the replies,
>
> I've checked both DCs and there are no replication errors. In fact, I
> can disable the account on one machine, connect to the other and what
> it disabled, and then enable it from the 2nd and watch it enable on the
> first.
>
> The event log errors on the workstation are as follows:
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1058
> Date: 1/22/2007
> Time: 11:56:13 AM
> User: SUTTON\KSmith
> Computer: XX29437D
> Description:
> Windows cannot access the file gpt.ini for GPO
> CN={37E1E4C6-9EDB-4A04-99F6-F01159942766},CN=Policies,CN=System,DC=sutton,DC=XXX,DC=XXX.
> The file must be present at the location
> <\\sutton.ewu.edu\SysVol\sutton.XXX.XXX\Policies\{37E1E4C6-9EDB-4A04-99F6-F01159942766}\gpt.ini>.
> (Logon failure: account currently disabled. ). Group Policy processing
> aborted.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1030
> Date: 1/22/2007
> Time: 11:56:13 AM
> User: SUTTON\KSmith
> Computer: XX29437D
> Description:
> Windows cannot query for the list of Group Policy objects. A message
> that describes the reason for this was previously logged by the policy
> engine.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> Event Type: Error
> Event Source: AutoEnrollment
> Event Category: None
> Event ID: 15
> Date: 1/22/2007
> Time: 11:57:41 AM
> User: N/A
> Computer: XX29437D
> Description:
> Automatic certificate enrollment for SUTTON\ksmith failed to contact
> the active directory (0x8007052b). Unable to update the password. The
> value provided as the current password is incorrect.
> Enrollment will not be performed.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Jorge Silva wrote:
>> Hi
>> Sounds like an replication issue, check which DC is the user
>> authenticating
>> and look for replication errors.
>>
>> --
>>
>> I hope that the information above helps you.
>> Have a Nice day.
>> Jorge Silva
>> MCSE
>>
>> <jtgasper3@xxxxxxxxx> wrote in message
>> news:1169493811.187410.297380@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>> > Hi,
>> >
>> > I'm running a fairly small domain, and have an issue I can't >> > resolve.
>> >
>> > I've got a user that tries to access a shares\printers on one of the
>> > domain controllers. She gets the error "Logon failure: account
>> > currently disabled." I look in the AD Users and computers and her
>> > account is active. When I point her to a 2nd DC she can connect >> > with
>> > out issue.
>> >
>> > I've tried actually disabling the account and then re-enabling and >> > with
>> > no change? The event log has nothing specific to the cause, just >> > some
>> > symptomatic stuff like it can't process GPO. The only difference
>> > between the the day she could log in and the next when she couldn't >> > is
>> > that several Office product updates occured that night.
>> >
>> > I should mention that other users can log into the affected >> > workstation
>> > and then connect to the shares on both DCs with out incident.
>> >
>> > Does anyone have any ideas?
>> >
>> > Thanks.
>> >
>


.

Relevant Pages

  • Re: outlook stinks - cant send emails!
    ... For some reason Verizon is breaking the connection, not Outlook. ... > test account settings everything works except for sending an outgoing ... after disabling it, the same problem continued. ...
    (microsoft.public.outlook)
  • Re: How DISCONNECT from LAN/Internet?
    ... > Disabling Connection. ... It is not possible to disable the connection at this ... if I go to Device Manager I can diable the LAN port from ... > 'connection' listings which seems to account for the original connection plus ...
    (microsoft.public.windowsxp.network_web)
  • RE: Cannot enable/disable Connection
    ... Have you tried going to the properties and removing the protocols you arent ... using, then disabling the connection? ... > Disabling Connection. ... > 'connection' listings which seems to account for the original connection plus ...
    (microsoft.public.windowsxp.network_web)
  • Re: outlook stinks - cant send emails!
    ... What version of Outlook do you have? ... This computer only has 1 mail account set-up. ... >> For some reason Verizon is breaking the connection, ... after disabling it, the same problem continued. ...
    (microsoft.public.outlook)
  • Re: Problem: No Network Connections under Guest Account
    ... The Guest Account on my other computer seems to ... Sounds like you might have more of an issue with your network than with the ... network connection settings. ...
    (microsoft.public.windowsxp.security_admin)