Re: Client machine problems after join of SMB2003 domain



For SBS 2003, the usual process for joining a workstation to the domain is:
(1) from the Server Mgmt console add a new user and computer,
(2) from the workstation run http://servername/connectcomputer

--
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"


"Todd M" <Todd M@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:146994D9-701C-4CA3-BF84-76412AE7F36D@xxxxxxxxxxxxxxxx
I just purchased SBS2003 R2 and brought up the server under near default
conditions, particualrly relating to any Group or Security policies which
I
haven't changed. Now, I had a previous domain -- let's call it Domain1
that
was a windows 2000 domain and it had several client computers attached (2
XP
Pro2s, and one Windows 2000 machine). I brought the SMB2003 domain up on
the
same IP address range, but made no trust between them at all. I then
disjoined the client machines from Domain1 and joined them to Domain2.
Everything appeared fine at first, but now I'm getting lots of issues
cropping up as I access programs on the client machines under the new
domain2
profile. I get registry access errors. I first saw it on my primary client
machine with Nero. I tried to install an update to Nero 7 and got 66
registration errors. The errors bascialy said access denied during
registration. Both the isntaller and just trying to install with
Regsvr32 --
permission denied. Then the same thing happened with Crystal Reports 8.5.
It
saw itself on the new domain and kicked off the installer but at the very
end
after the file copying, once again permission denied on the component
registration. Then VB6 did the same thing. It came up in the IDE, but when
I
tried to click the references menu item with should display me a list of
COM
objects I can reference in a VB6 project, I got permission denied. In all
cases, uninstalling did not make a difference. I have uninstaleld, dropped
from the domain, tried to isntall as local admin and when that failed as
domain admin. Again, no go. I even rejoined the old Domain1, tried to
uninstall, then came back to both the local admin acct and domain2 when
that
failed -- now even VB woudln't even install once uninstalled. It puts down
all the files, but then fails on component registration. This same
scenario
occured on the Windows 2000 laptop after I disjoined. Now, I didn't have
problems with Office 2003, nor Visual Studio 2005. It's as if the system
put
parts of the registry into lockdown and won't allow any access to anything
installed from the other domain. I've never had lockdowns that affected
both
local and domain admins (which I was logged to the workstation as) -- is
this
some setting I can change at the SMB server level, some group or security
policy that was configured by default -- or am I stuck in wiping the old
machines and reinstalling all the applications from scratch (not what I
wanted to do because I'd have three machines I'd have to do that with).
I've
also never had a problem like this before on Windows domains -- my laptop
has
been joined and disjoined from several Windows 2000/Windows 2003
domains --
no problems. But immediately after join the SMB2003 domain, problems.


.



Relevant Pages

  • Re: Further Questions on Adding group to local administrators group via GPO
    ... There are multiple ways of achieving the result required, and it depends if you want to install it for all users on certain machines or for all machines for certain users. ... you need to create a policy and go to the Software section of the machine component and create the install package. ... you do not require Local Admin rights to get the installation of the Software to work.. ...
    (microsoft.public.windows.server.sbs)
  • Re: Local Admin on workstation
    ... They may use their temporary high privilege to create another local admin, reset the local admin password, install software without license... ... > convertors pack from MS for office 03 machines. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Error 0x80072EE2
    ... I have the same error on many machines. ... install it as a local admin. ... But if all this fails, ...
    (microsoft.public.windowsupdate)
  • Re: Flash Install needs Administrator Rights
    ... It will install so far (that nice little blue line ... > itself - the local admin account. ... > to the local workstation, logging in as local admin, and installing? ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows 2000 DNS Failure
    ... Post the results of an IPCONFIG /ALL from a working workstation and from ... Other machines can connect to the shares on this pc fine but I ... > 2k on the same machine, and that install works fine so it's not hardware. ...
    (microsoft.public.win2000.networking)