Re: Error binding to local domain

Hi Steve,

Welcome to SBS newsgroup.

Issue description:

===========

I understand that you encountered 1006 and 1030 error.

Analyzing and suggestions:

============

Generally speaking, this issue might be relate to AD configuration on SBS
domain, please perform tests below:

1. If this user log on to a DIFFERENT computer, can the problem be
reproduced? If not, the problem is most likely related to the user profile
on the ''problematic'' computer. I suggest that you delete the profile on
that computer and try to log on to it again. (That means delete the Domain
administrator's profiles on that workstation then logon the workstation
with Administrator profiles again to see if the issue can be resolved.

2. If the problem can be reproduced on all the client computers, most
likely this user's AD account is corrupted. I would suggest that we first
reset the password for this user in dsa.msc and check if the problem is
resolved.
3. Please also remove and rejoin this client computer to the domain to see
if this issue can be resolved.

Thanks for all your efforts, I will be here waiting for your updates,
please perform my suggestions and paste any progress to newsgroup.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Error binding to local domain
| thread-index: AcWhOtA0OcOAsYhqTZepzRQ/QSEcVA==
| X-WBNR-Posting-Host: 65.164.216.122
| From: =?Utf-8?B?U3RldmUgTGFyc29u?= <SteveLarson@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <2E7C8934-DBF1-47BE-9EA2-D2947D7C1799@xxxxxxxxxxxxx>
<uLiBFqPoFHA.2920@xxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Error binding to local domain
| Date: Sun, 14 Aug 2005 18:44:02 -0700
| Lines: 319
| Message-ID: <464AB7A0-D39E-4FD3-821B-28EEA2EB4B59@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144287
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| "Lanwench [MVP - Exchange]" wrote:
|
| >
| >
| > In news:2E7C8934-DBF1-47BE-9EA2-D2947D7C1799@xxxxxxxxxxxxx,
| > Steve Larson <SteveLarson@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
| > > I am receiving an error in the event log when I try to resolve a
| > > domain user name on a client machine (i.e. add a domain user to the
| > > permissions on a folder or add domain user to a group) when
| > > authenticating as the domain administrator. The permissions dialog
| > > just times out trying to resolve the user. The machine is a member
| > > of the domain, has XP SP2 installed, and has allowed the same type of
| > > permissions updates in the past. The user name is able to be
| > > resolved when authenticating as another domain user.
| > >
| > > This is the message in the client event log. "Windows cannot bind to
| > > [MyLocalDomain].local domain. (Local Error). Group Policy processing
| > > aborted." Source: Userenv, EventID: 1006 and is always followed by
| > > the following event "Windows cannot query for the list of Group
| > > Policy objects. A message that describes the reason for this was
| > > previously logged by the policy engine." Source: Userenv, EventID:
| > > 1030.
| > >
| > > I have dropped a machine to a workgroup and rejoined it to the domain
| > > but
| > > get the same results.
| > >
| > > I did not find a machine personal certificate listed in MMC. When I
| > > try to add a certificate, I received an error dialog stating that the
| > > wizard could not be started because Active Directory could not be
| > > contacted. The [MyLocalDomain] Root Certificate Authority and the
| > > [DomainController].[MyPublicDomain] are listed in the Certificates for
| > > Trusted Root Certification Authorities. (All this as logged in as
| > > domain administrator).
| > >
| > > I have pasted the help and Support link text at the end of this but
| > > nothing seemed to be much help there (I was not able to get the
| > > Win2000 netdiag tool to run.)
| > >
| > > I have also pasted part of the client machine logfile for userenv at
| > > the end.
| > >
| > > Any ideas on where else to troubleshoot?
| > >
| > > Steve
| > <snip>
| >
| > Just a sanity check - is the *only* DNS server you have on the client,
the
| > LAN IP address of your SBS server?
| >
| > If not, make it so. If so, if you run
| >
| > gpresult
| >
| > from a command line, what do you see?
| > If you try
| >
| > gpupdate /force
| >
| > does it help?
| >
| >
| >
| This is the result of 'gpresult', 'gpupdate /force', and 'gpresult'. The
| behavior has not changed. (It looks like I need to do some research and
| maybe a follow up post on GP :>)
| C:\Documents and Settings\administrator.MYDOMAIN>gpresult
|
| Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
| Copyright (C) Microsoft Corp. 1981-2001
|
| Created On 8/14/2005 at 8:08:20 PM
|
|
| RSOP results for MYDOMAIN\administrator on MUSIC1 : Logging Mode
| ------------------------------------------------------------------------
|
| OS Type: Microsoft Windows XP Professional
| OS Configuration: Member Workstation
| OS Version: 5.1.2600
| Domain Name: MYDOMAIN
| Domain Type: Windows 2000
| Site Name: Default-First-Site-Name
| Roaming Profile:
| Local Profile: C:\Documents and
Settings\administrator.MYDOMAIN
| Connected over a slow link?: No
|
|
| COMPUTER SETTINGS
| ------------------
| CN=MUSIC1,OU=Staff
| Desktop,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=MyDomain,DC=local
| Last time Group Policy was applied: 8/14/2005 at 7:56:06 PM
| Group Policy was applied from: dc1.MyDomain.local
| Group Policy slow link threshold: 500 kbps
|
| Applied Group Policy Objects
| -----------------------------
| AutoUpdateViaSUS
| AutoWindowsUpdate
| Small Business Server Windows Firewall
| Small Business Server Client Computer
| Small Business Server Domain Password Policy
| Small Business Server Remote Assistance Policy
| Small Business Server Lockout Policy
| Default Domain Policy
|
| The following GPOs were not applied because they were filtered out
| -------------------------------------------------------------------
| Small Business Server Internet Connection Firewall
| Filtering: Denied (WMI Filter)
| WMI Filter: PreSP2
|
| AV
| Filtering: Disabled (GPO)
|
| Full Software
| Filtering: Disabled (GPO)
|
| Local Group Policy
| Filtering: Not Applied (Empty)
|
| The computer is a part of the following security groups:
| --------------------------------------------------------
| BUILTIN\Administrators
| Everyone
| Debugger Users
| BUILTIN\Users
| NT AUTHORITY\NETWORK
| NT AUTHORITY\Authenticated Users
| MUSIC1$
| Domain Computers
| CERTSVC_DCOM_ACCESS
|
|
| USER SETTINGS
| --------------
| CN=Administrator,CN=Users,DC=MyDomain,DC=local
| Last time Group Policy was applied: 8/14/2005 at 8:05:05 PM
| Group Policy was applied from: dc1.MyDomain.local
| Group Policy slow link threshold: 500 kbps
|
| Applied Group Policy Objects
| -----------------------------
| Default Domain Policy
|
| The following GPOs were not applied because they were filtered out
| -------------------------------------------------------------------
| Small Business Server Internet Connection Firewall
| Filtering: Not Applied (Empty)
|
| Small Business Server Lockout Policy
| Filtering: Disabled (GPO)
|
| Small Business Server Windows Firewall
| Filtering: Denied (WMI Filter)
| WMI Filter: PostSP2
|
| Small Business Server Remote Assistance Policy
| Filtering: Disabled (GPO)
|
| Local Group Policy
| Filtering: Not Applied (Empty)
|
| Small Business Server Client Computer
| Filtering: Not Applied (Empty)
|
| Small Business Server Domain Password Policy
| Filtering: Not Applied (Empty)
|
| The user is a part of the following security groups:
| ----------------------------------------------------
| Domain Users
| Everyone
| Debugger Users
| BUILTIN\Users
| BUILTIN\Administrators
| Group Policy Creator Owners
| Domain Admins
| SBS Internet Users
| SBS Report Users
| Schema Admins
| Enterprise Admins
| SBS Mobile Users
| LOCAL
| NT AUTHORITY\INTERACTIVE
| NT AUTHORITY\Authenticated Users
|
| C:\Documents and Settings\administrator.MYDOMAIN>gpupdate /force
| Refreshing Policy...
|
| User Policy Refresh has completed.
| Computer Policy Refresh has completed.
|
|
| C:\Documents and Settings\administrator.MYDOMAIN>gpresult
|
| Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
| Copyright (C) Microsoft Corp. 1981-2001
|
| Created On 8/14/2005 at 8:13:29 PM
|
|
| RSOP results for MYDOMAIN\administrator on MUSIC1 : Logging Mode
| ------------------------------------------------------------------------
|
| OS Type: Microsoft Windows XP Professional
| OS Configuration: Member Workstation
| OS Version: 5.1.2600
| Domain Name: MYDOMAIN
| Domain Type: Windows 2000
| Site Name: Default-First-Site-Name
| Roaming Profile:
| Local Profile: C:\Documents and
Settings\administrator.MYDOMAIN
| Connected over a slow link?: No
|
|
| COMPUTER SETTINGS
| ------------------
| CN=MUSIC1,OU=Staff
| Desktop,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=MyDomain,DC=local
| Last time Group Policy was applied: 8/14/2005 at 8:12:05 PM
| Group Policy was applied from: dc1.MyDomain.local
| Group Policy slow link threshold: 500 kbps
|
| Applied Group Policy Objects
| -----------------------------
| AutoUpdateViaSUS
| AutoWindowsUpdate
| Small Business Server Windows Firewall
| Small Business Server Client Computer
| Small Business Server Domain Password Policy
| Small Business Server Remote Assistance Policy
| Small Business Server Lockout Policy
| Default Domain Policy
|
| The following GPOs were not applied because they were filtered out
| -------------------------------------------------------------------
| Small Business Server Internet Connection Firewall
| Filtering: Denied (WMI Filter)
| WMI Filter: PreSP2
|
| AV
| Filtering: Disabled (GPO)
|
| Full Software
| Filtering: Disabled (GPO)
|
| Local Group Policy
| Filtering: Not Applied (Empty)
|
| The computer is a part of the following security groups:
| --------------------------------------------------------
| BUILTIN\Administrators
| Everyone
| Debugger Users
| BUILTIN\Users
| NT AUTHORITY\NETWORK
| NT AUTHORITY\Authenticated Users
| MUSIC1$
| Domain Computers
| CERTSVC_DCOM_ACCESS
|
|
| USER SETTINGS
| --------------
| CN=Administrator,CN=Users,DC=MyDomain,DC=local
| Last time Group Policy was applied: 8/14/2005 at 8:12:05 PM
| Group Policy was applied from: dc1.MyDomain.local
| Group Policy slow link threshold: 500 kbps
|
| Applied Group Policy Objects
| -----------------------------
| Default Domain Policy
|
| The following GPOs were not applied because they were filtered out
| -------------------------------------------------------------------
| Small Business Server Internet Connection Firewall
| Filtering: Not Applied (Empty)
|
| Small Business Server Lockout Policy
| Filtering: Disabled (GPO)
|
| Small Business Server Windows Firewall
| Filtering: Denied (WMI Filter)
| WMI Filter: PostSP2
|
| Small Business Server Remote Assistance Policy
| Filtering: Disabled (GPO)
|
| Local Group Policy
| Filtering: Not Applied (Empty)
|
| Small Business Server Client Computer
| Filtering: Not Applied (Empty)
|
| Small Business Server Domain Password Policy
| Filtering: Not Applied (Empty)
|
| The user is a part of the following security groups:
| ----------------------------------------------------
| Domain Users
| Everyone
| Debugger Users
| BUILTIN\Users
| BUILTIN\Administrators
| Group Policy Creator Owners
| Domain Admins
| SBS Internet Users
| SBS Report Users
| Schema Admins
| Enterprise Admins
| SBS Mobile Users
| LOCAL
| NT AUTHORITY\INTERACTIVE
| NT AUTHORITY\Authenticated Users
|
| C:\Documents and Settings\administrator.MYDOMAIN>
|
|

.

Relevant Pages

  • RE: Users adding printers
    ... Where is a wonderful article on how to install a printer which is useful ... Deploying Printers to Users or Computers by using Group Policy Print ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: extending data partitions & my documents redirection
    ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ... >>> Document folders to the default shared for users on the Small Business ... Go to Group Policy Management\Forest\Domains\Yourdomain.local\Group ...
    (microsoft.public.windows.server.sbs)
  • RE: Error binding to local domain
    ... It seems it is not possible for you to have enough time to troubleshoot ... Microsoft CSS Online Newsgroup Support ... resolve the ... |>> prevents Group Policy settings from being applied. ...
    (microsoft.public.windows.server.sbs)
  • Re: My Documents redirect stopped working on one user profile.
    ... my understanding is that ALL DC's 'send out' Group Policy. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Expand OU you want to configure Folder Redirection and then ...
    (microsoft.public.windows.server.sbs)
  • Re: Intermittant GPO failure to apply
    ... Windows XP. ... If so, if you create a new group policy on SBS 2003 domain, does the issue ... Produced By Microsoft MimeOLE V6.00.3790.1830 ... |> Welcome to our SBS newsgroup. ...
    (microsoft.public.windows.server.sbs)