Re: "Access Is Denied" when XPPro Client tries to Join Domain



I didn't see an error in the security log when I received "Access is
Denied" ...where should I look to see what's causing the error?

>Have you tried manually creating the computer account using the Set up Client
>Computers wizard? You can also create it directly in AD Users and Computers
>but this requires some additional configurations to force it to use Group
>Policies and such.
>
>"vze78se7@xxxxxxxxxxx" wrote:
>
>> Hi All: I have a network of about 8 XPpro clients (NAT'd behind a
>> router/FW) that were working under a local workgroup. The PCs all
>> have static 192.168.0.x IPs.
>>
>> I added SBS2003 server and ran it through it config, letting it create
>> a local domain, etc. It's running on it's own IP along with the other
>> computers, not routing the computers.
>>
>> I decided to create a user account for each user on the server, either
>> domain users or administrators, and didn't assign a computer to them.
>>
>> On most of the computers, I was able to join the domain without a
>> problem, and their computer was added at the time I joined them to the
>> domain. On most of them I only had to use the system CP and specify
>> the WINS name (instead of the FQDN) of the server.
>>
>> One of the computers, however, can't join the domain no matter what
>> I've tried. Trying to join directly from the System CP or by using the
>> Network ID Wizard both fail with an "Access is Denied" error. I've
>> tried creating several users on the server both an administrative and
>> domain user, and each fails (I also tried using "Administrator" as the
>> login and that too fails).
>>
>> When I look at the security log on the server, it shows a successful
>> log on by each of the usernames, but the security log doesn't tell me
>> why the next step (creating the computer's ID in the domain?) fails.
>> So the user credentials are being passed to the server but I think
>> registering the computer in the domain is failing. I've tried numerous
>> computer names from the one suggested by the network utility to very
>> simple ones.
>>
>> I also used the domain wizard on the local website to try and join the
>> domain. I'm able to log in to the domain and browse the list of users
>> on the server, and match them to the existing user, and the process
>> runs and I get a message "you must restart for the changes to take
>> effect", but when you reboot you're back to the local login without
>> access to the domain.
>>
>> It only happens on this one computer, a new-ish Dell desktop running
>> SP2, which is similar to all the other computers that have
>> successfully joined. This particular machine has Windows Firewall
>> disabled, and it had several folders being shared with the other PCs
>> in the workgroup. I've also disabled Norton AV and Microsoft AntiSpam,
>> as well as any applications running as services, all to no avail.
>> Searching the KB has turned up nothing that applies to this computer.
>>
>> Any Ideas?
>>

.



Relevant Pages

  • Re: user cant access OWA or RWW
    ... I filtered the Security log on the server using her name in the User box and unchecked Success. ... Now I see Event 533's for her account when I tried it this morning. ... There should be a couple of events during this login process. ...
    (microsoft.public.windows.server.sbs)
  • Re: Losing access to a shared folder
    ... I see no failures in the security log. ... Both shares are on the same file server. ... domain controllers as preferred and secondary dens servers. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: dns server unable to open active directory
    ... Systems Administrator ... The Security Log is set to maximum size of 512 kb, ... Event Source: DNS ... The DNS server was unable to open the Active Directory. ...
    (microsoft.public.windows.server.active_directory)
  • Re: dns server unable to open active directory
    ... The Security Log is set to maximum size of 512 kb, ... Systems Administrator ... The DNS server was unable to open the Active Directory. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Logging IP address when Administrator logs in
    ... If you enable auditing of account logons in Domain Controller Security policy it will ... computers it will record a logon event in the security log of the computer that the ... administrators account on domain computers they need to manage. ...
    (microsoft.public.win2000.security)