Re: Error binding to local domain

Charles,
Thanks for the response. The problem is on all machines. I will try the
number 2 solution and report back. I tried number 3 before I posted the
question.

Steve
""Charles Yang [MSFT]"" wrote:

> Hi Steve,
>
> Welcome to SBS newsgroup.
>
> Issue description:
>
> ===========
>
> I understand that you encountered 1006 and 1030 error.
>
> Analyzing and suggestions:
>
> ============
>
> Generally speaking, this issue might be relate to AD configuration on SBS
> domain, please perform tests below:
>
> 1. If this user log on to a DIFFERENT computer, can the problem be
> reproduced? If not, the problem is most likely related to the user profile
> on the ''problematic'' computer. I suggest that you delete the profile on
> that computer and try to log on to it again. (That means delete the Domain
> administrator's profiles on that workstation then logon the workstation
> with Administrator profiles again to see if the issue can be resolved.
>
> 2. If the problem can be reproduced on all the client computers, most
> likely this user's AD account is corrupted. I would suggest that we first
> reset the password for this user in dsa.msc and check if the problem is
> resolved.
> 3. Please also remove and rejoin this client computer to the domain to see
> if this issue can be resolved.
>
> Thanks for all your efforts, I will be here waiting for your updates,
> please perform my suggestions and paste any progress to newsgroup.
>
>
>
> Best regards,
>
> Charles Yang (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> | Thread-Topic: Error binding to local domain
> | thread-index: AcWhOtA0OcOAsYhqTZepzRQ/QSEcVA==
> | X-WBNR-Posting-Host: 65.164.216.122
> | From: =?Utf-8?B?U3RldmUgTGFyc29u?= <SteveLarson@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | References: <2E7C8934-DBF1-47BE-9EA2-D2947D7C1799@xxxxxxxxxxxxx>
> <uLiBFqPoFHA.2920@xxxxxxxxxxxxxxxxxxxx>
> | Subject: Re: Error binding to local domain
> | Date: Sun, 14 Aug 2005 18:44:02 -0700
> | Lines: 319
> | Message-ID: <464AB7A0-D39E-4FD3-821B-28EEA2EB4B59@xxxxxxxxxxxxx>
> | MIME-Version: 1.0
> | Content-Type: text/plain;
> | charset="Utf-8"
> | Content-Transfer-Encoding: 7bit
> | X-Newsreader: Microsoft CDO for Windows 2000
> | Content-Class: urn:content-classes:message
> | Importance: normal
> | Priority: normal
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | Newsgroups: microsoft.public.windows.server.sbs
> | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144287
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | "Lanwench [MVP - Exchange]" wrote:
> |
> | >
> | >
> | > In news:2E7C8934-DBF1-47BE-9EA2-D2947D7C1799@xxxxxxxxxxxxx,
> | > Steve Larson <SteveLarson@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
> | > > I am receiving an error in the event log when I try to resolve a
> | > > domain user name on a client machine (i.e. add a domain user to the
> | > > permissions on a folder or add domain user to a group) when
> | > > authenticating as the domain administrator. The permissions dialog
> | > > just times out trying to resolve the user. The machine is a member
> | > > of the domain, has XP SP2 installed, and has allowed the same type of
> | > > permissions updates in the past. The user name is able to be
> | > > resolved when authenticating as another domain user.
> | > >
> | > > This is the message in the client event log. "Windows cannot bind to
> | > > [MyLocalDomain].local domain. (Local Error). Group Policy processing
> | > > aborted." Source: Userenv, EventID: 1006 and is always followed by
> | > > the following event "Windows cannot query for the list of Group
> | > > Policy objects. A message that describes the reason for this was
> | > > previously logged by the policy engine." Source: Userenv, EventID:
> | > > 1030.
> | > >
> | > > I have dropped a machine to a workgroup and rejoined it to the domain
> | > > but
> | > > get the same results.
> | > >
> | > > I did not find a machine personal certificate listed in MMC. When I
> | > > try to add a certificate, I received an error dialog stating that the
> | > > wizard could not be started because Active Directory could not be
> | > > contacted. The [MyLocalDomain] Root Certificate Authority and the
> | > > [DomainController].[MyPublicDomain] are listed in the Certificates for
> | > > Trusted Root Certification Authorities. (All this as logged in as
> | > > domain administrator).
> | > >
> | > > I have pasted the help and Support link text at the end of this but
> | > > nothing seemed to be much help there (I was not able to get the
> | > > Win2000 netdiag tool to run.)
> | > >
> | > > I have also pasted part of the client machine logfile for userenv at
> | > > the end.
> | > >
> | > > Any ideas on where else to troubleshoot?
> | > >
> | > > Steve
> | > <snip>
> | >
> | > Just a sanity check - is the *only* DNS server you have on the client,
> the
> | > LAN IP address of your SBS server?
> | >
> | > If not, make it so. If so, if you run
> | >
> | > gpresult
> | >
> | > from a command line, what do you see?
> | > If you try
> | >
> | > gpupdate /force
> | >
> | > does it help?
> | >
> | >
> | >
> | This is the result of 'gpresult', 'gpupdate /force', and 'gpresult'. The
> | behavior has not changed. (It looks like I need to do some research and
> | maybe a follow up post on GP :>)
> | C:\Documents and Settings\administrator.MYDOMAIN>gpresult
> |
> | Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
> v2.0
> | Copyright (C) Microsoft Corp. 1981-2001
> |
> | Created On 8/14/2005 at 8:08:20 PM
> |
> |
> | RSOP results for MYDOMAIN\administrator on MUSIC1 : Logging Mode
> | ------------------------------------------------------------------------
> |
> | OS Type: Microsoft Windows XP Professional
> | OS Configuration: Member Workstation
> | OS Version: 5.1.2600
> | Domain Name: MYDOMAIN
> | Domain Type: Windows 2000
> | Site Name: Default-First-Site-Name
> | Roaming Profile:
> | Local Profile: C:\Documents and
> Settings\administrator.MYDOMAIN
> | Connected over a slow link?: No
> |
> |
> | COMPUTER SETTINGS
> | ------------------
> | CN=MUSIC1,OU=Staff
> | Desktop,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=MyDomain,DC=local
> | Last time Group Policy was applied: 8/14/2005 at 7:56:06 PM
> | Group Policy was applied from: dc1.MyDomain.local
> | Group Policy slow link threshold: 500 kbps
> |
> | Applied Group Policy Objects
> | -----------------------------
> | AutoUpdateViaSUS
> | AutoWindowsUpdate
> | Small Business Server Windows Firewall
> | Small Business Server Client Computer
> | Small Business Server Domain Password Policy
> | Small Business Server Remote Assistance Policy
> | Small Business Server Lockout Policy
> | Default Domain Policy
> |
> | The following GPOs were not applied because they were filtered out
> | -------------------------------------------------------------------
> | Small Business Server Internet Connection Firewall
> | Filtering: Denied (WMI Filter)
> | WMI Filter: PreSP2
> |
> | AV
> | Filtering: Disabled (GPO)
> |
> | Full Software
> | Filtering: Disabled (GPO)
> |
> | Local Group Policy
> | Filtering: Not Applied (Empty)
> |
> | The computer is a part of the following security groups:
> | --------------------------------------------------------
> | BUILTIN\Administrators
> | Everyone
> | Debugger Users
> | BUILTIN\Users
> | NT AUTHORITY\NETWORK
> | NT AUTHORITY\Authenticated Users
> | MUSIC1$
> | Domain Computers
> | CERTSVC_DCOM_ACCESS
> |
> |
> | USER SETTINGS
> | --------------
> | CN=Administrator,CN=Users,DC=MyDomain,DC=local
> | Last time Group Policy was applied: 8/14/2005 at 8:05:05 PM
> | Group Policy was applied from: dc1.MyDomain.local
> | Group Policy slow link threshold: 500 kbps
> |
> | Applied Group Policy Objects
> | -----------------------------
> | Default Domain Policy
> |
> | The following GPOs were not applied because they were filtered out
> | -------------------------------------------------------------------
> | Small Business Server Internet Connection Firewall
> | Filtering: Not Applied (Empty)
> |
> | Small Business Server Lockout Policy
> | Filtering: Disabled (GPO)
> |
> | Small Business Server Windows Firewall
> | Filtering: Denied (WMI Filter)
> | WMI Filter: PostSP2
> |
> | Small Business Server Remote Assistance Policy
> | Filtering: Disabled (GPO)
> |
> | Local Group Policy
> | Filtering: Not Applied (Empty)
> |
> | Small Business Server Client Computer
> | Filtering: Not Applied (Empty)
> |
> | Small Business Server Domain Password Policy
> | Filtering: Not Applied (Empty)
> |
> | The user is a part of the following security groups:
> | ----------------------------------------------------
> | Domain Users
> | Everyone
> | Debugger Users
> | BUILTIN\Users
> | BUILTIN\Administrators
> | Group Policy Creator Owners
> | Domain Admins
> | SBS Internet Users
> | SBS Report Users
> | Schema Admins
> | Enterprise Admins
> | SBS Mobile Users
> | LOCAL
> | NT AUTHORITY\INTERACTIVE
> | NT AUTHORITY\Authenticated Users
> |
> | C:\Documents and Settings\administrator.MYDOMAIN>gpupdate /force
> | Refreshing Policy...
> |
> | User Policy Refresh has completed.
> | Computer Policy Refresh has completed.
> |
.

Relevant Pages

  • Re: Outlook wont connect locally when configured for HTTP
    ... How did you configure your outlook profile? ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... the firewall block the https connections from internal. ...
    (microsoft.public.windows.server.sbs)
  • Re: My Documents redirect stopped working on one user profile.
    ... my understanding is that ALL DC's 'send out' Group Policy. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Expand OU you want to configure Folder Redirection and then ...
    (microsoft.public.windows.server.sbs)
  • RE: Users adding printers
    ... Where is a wonderful article on how to install a printer which is useful ... Deploying Printers to Users or Computers by using Group Policy Print ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: My Documents redirect stopped working on one user profile.
    ... If userenv 1030 was logged it means this profile cant access gpo. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | Subject: Re: My Documents redirect stopped working on one user profile. ...
    (microsoft.public.windows.server.sbs)
  • Re: Some PCs no longer picking up group policise set by SBS
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... >> I understand that the Group Policy does not being applied to some of your ... Do those problematic client workstations locate at the same OU ...
    (microsoft.public.windows.server.sbs)