Re: "Enabling" an already enabled user account?

Jorge,

1) The IPCONFIG/ALL Output
Windows IP Configuration

Host Name . . . . . . . . . . . . : XX29437D
Primary Dns Suffix . . . . . . . : sutton.ewu.edu
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : sutton.ewu.edu
ewu.edu

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8050 PCI-E
ASF Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-13-20-12-B7-6B
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 146.187.13.XXX
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 146.187.13.1
DNS Servers . . . . . . . . . . . : 146.187.224.9
146.187.216.3

2) I logged onto the account (roaming profile) using another machine
and it is also having the same problem.

3) I am able to connect to the sysvol share of the domain dfs. I am
able to connect to other DFS shares as well.

Interestingly enough, the %LOGONSERVER% on one of my logins was the
affected server, although it has used the other server also.

Thanks,
John

Jorge Silva wrote:
Can you post here the results for ipconfig /all?
Is that user having problems in all machines or just that one?
Try to access \\domain.com\sysvol\domain.com
Group policies are not applied the way you expect; "Event ID 1058" and
"Event ID 1030" errors in the application log
http://support.microsoft.com/kb/314494/en-us


--

I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE

<jtgasper3@xxxxxxxxx> wrote in message
news:1169496810.756605.276090@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thanks for the replies,

I've checked both DCs and there are no replication errors. In fact, I
can disable the account on one machine, connect to the other and what
it disabled, and then enable it from the 2nd and watch it enable on the
first.

The event log errors on the workstation are as follows:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 1/22/2007
Time: 11:56:13 AM
User: SUTTON\KSmith
Computer: XX29437D
Description:
Windows cannot access the file gpt.ini for GPO
CN={37E1E4C6-9EDB-4A04-99F6-F01159942766},CN=Policies,CN=System,DC=sutton,DC=XXX,DC=XXX.
The file must be present at the location
<\\sutton.ewu.edu\SysVol\sutton.XXX.XXX\Policies\{37E1E4C6-9EDB-4A04-99F6-F01159942766}\gpt.ini>.
(Logon failure: account currently disabled. ). Group Policy processing
aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 1/22/2007
Time: 11:56:13 AM
User: SUTTON\KSmith
Computer: XX29437D
Description:
Windows cannot query for the list of Group Policy objects. A message
that describes the reason for this was previously logged by the policy
engine.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 1/22/2007
Time: 11:57:41 AM
User: N/A
Computer: XX29437D
Description:
Automatic certificate enrollment for SUTTON\ksmith failed to contact
the active directory (0x8007052b). Unable to update the password. The
value provided as the current password is incorrect.
Enrollment will not be performed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Jorge Silva wrote:
Hi
Sounds like an replication issue, check which DC is the user
authenticating
and look for replication errors.

--

I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE

<jtgasper3@xxxxxxxxx> wrote in message
news:1169493811.187410.297380@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I'm running a fairly small domain, and have an issue I can't resolve.

I've got a user that tries to access a shares\printers on one of the
domain controllers. She gets the error "Logon failure: account
currently disabled." I look in the AD Users and computers and her
account is active. When I point her to a 2nd DC she can connect with
out issue.

I've tried actually disabling the account and then re-enabling and with
no change? The event log has nothing specific to the cause, just some
symptomatic stuff like it can't process GPO. The only difference
between the the day she could log in and the next when she couldn't is
that several Office product updates occured that night.

I should mention that other users can log into the affected workstation
and then connect to the shares on both DCs with out incident.

Does anyone have any ideas?

Thanks.



.

Relevant Pages

  • Re: Help! Cant send hotmail in OE 6
    ... >> I have Windows XP Pro with OUtlook Express 6. ... >> my hotmail account to send and receive mail. ... >> about disabling the Anti virus email scan, ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Disabled account + locked computer
    ... You can not break a running session with just disabling the account in AD. ... If you will make sure to get the user out you can use shutdown.exe to reboot the user's machine after disabling, a bit hard way but also effective. ... user realizes it, goes back to his computer, tries to unlock it... ... with Windows XP clients and Windows ...
    (microsoft.public.windows.server.active_directory)
  • Re: user name to log on
    ... Did you set up another account BEFORE disabling the two accounts? ... Unofficial FAQ for Windows Server 2003 at ... >i disabled the administrator account and the guest account and restarted ...
    (microsoft.public.windowsxp.accessibility)
  • Mailbox Access Denied
    ... I went and did a silly thing by disabling a few accounts, ... I went ahead and granted the SELF account in the Mailbox ... Store " - Windows 2000 account Domain\user; ...
    (microsoft.public.exchange2000.admin)
  • Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator
    ... This is common in most Pre-Installed Windows System. ... > Administrator account allows local Administrator ... IBM Systems with preinstalled Microsoft ...
    (Bugtraq)