Re: Error binding to local domain



In news:2E7C8934-DBF1-47BE-9EA2-D2947D7C1799@xxxxxxxxxxxxx,
Steve Larson <SteveLarson@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
> I am receiving an error in the event log when I try to resolve a
> domain user name on a client machine (i.e. add a domain user to the
> permissions on a folder or add domain user to a group) when
> authenticating as the domain administrator. The permissions dialog
> just times out trying to resolve the user. The machine is a member
> of the domain, has XP SP2 installed, and has allowed the same type of
> permissions updates in the past. The user name is able to be
> resolved when authenticating as another domain user.
>
> This is the message in the client event log. "Windows cannot bind to
> [MyLocalDomain].local domain. (Local Error). Group Policy processing
> aborted." Source: Userenv, EventID: 1006 and is always followed by
> the following event "Windows cannot query for the list of Group
> Policy objects. A message that describes the reason for this was
> previously logged by the policy engine." Source: Userenv, EventID:
> 1030.
>
> I have dropped a machine to a workgroup and rejoined it to the domain
> but
> get the same results.
>
> I did not find a machine personal certificate listed in MMC. When I
> try to add a certificate, I received an error dialog stating that the
> wizard could not be started because Active Directory could not be
> contacted. The [MyLocalDomain] Root Certificate Authority and the
> [DomainController].[MyPublicDomain] are listed in the Certificates for
> Trusted Root Certification Authorities. (All this as logged in as
> domain administrator).
>
> I have pasted the help and Support link text at the end of this but
> nothing seemed to be much help there (I was not able to get the
> Win2000 netdiag tool to run.)
>
> I have also pasted part of the client machine logfile for userenv at
> the end.
>
> Any ideas on where else to troubleshoot?
>
> Steve
<snip>

Just a sanity check - is the *only* DNS server you have on the client, the
LAN IP address of your SBS server?

If not, make it so. If so, if you run

gpresult

from a command line, what do you see?
If you try

gpupdate /force

does it help?


.

Relevant Pages

  • join xp to 2k domain, trust of domain controler failed
    ... When you origionally joined your XP client to the W2K ... >the 2k is domain controller with active dir and dns. ... >I am using the local adm account of xp to logon the xp. ... >the domain user was successfully authenticated by domain ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Remote Tab - My Computer Properties - Controls Disabled??
    ... Ok, basically when a domain user logs on from an XP client, the controls in ... I check the remote assistance GPO and this was not set, ... I'm wondering if there is a default setting that's over riding the GPO. ... > This tab's controls are disabled for regular domain users on XP Client systems ...
    (microsoft.public.windows.server.general)
  • Re: It must be simple, but...
    ... > (on the client) to a new Domain account, or do I have to set everything up ... using the DOMAIN user accounts ONLY. ... >> Gregg Hill ...
    (microsoft.public.windows.server.sbs)
  • Re: long time to log on
    ... > to logging on to a domain/ When the client logs in to the workgroup ... > can't add a domain user to the administrators group definitely tells ... It sounds like you've got your dns set incorrectly on the workstations. ...
    (microsoft.public.windowsxp.general)
  • Re: Inconsistant network connectivity
    ... The client can resolve. ... I'll check the event log and see what I can find out. ... >> client shows the Primary DNS suffix and DNS suffix search list as our domain ...
    (microsoft.public.win2000.general)
Quantcast