Software

Ask something
Question Locked

user cannot log in to domain from any computer

0 helpful
9 replies

by gtechstuff

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Has anyone seen this and know how to fix it.

We are using AD 2003 and we have a user who has been set up for quite some time now. Earlier their computer crashed and had to be rebuilt. after the rebuild we had the user log in to set up the profile email etc. All of a sudden the user is unable to log on to the network. We tested her account on another machine and she cannot log on to our network on any computer. what gives?????? No error message or security messages on the dc's

Thanks,

9 replies

by retro77

What exactly happens when the user [customer] tries to log in? Does it attempt to and immediately log off? Does it throw an error message?

by gtechstuff

I get a system cannot log you on. Make sure the username and password are correct error.

This is not a new user and it was working up until the point our desktop support folks re imaged their machine.

The password was changed. The user cannot log on from any machine in the building

by tesellavino

Was the user able to access the network to setup the profile & E-mail? Is User Inactive? Is the computer added to AD?

by gtechstuff

The user was set up and had active email. this problem occured after their computer was reimaged by our desktop folks.

The user is active and has been an active account for quite some time.

The computer is listed in AD. However the user cannot log on from any machine in the building.

by maniacman

Try recreating the user account, as there is something definitely wrong with the object SID which is preventing the user from logging in properly and granting access to shared resources. Also, ensure that the user account isn't disabled or locked out.

by gtechstuff

is there a way to repair the sid without recreating the user account.

If I do so what does the user stand to lose functionality-wise if I recreate the account?

by cg it

users lose permissions if you create a new user profile. They will also lose mapped drives, logon scripts, desktop settings, and assigned applications, ...blah blah but then if you have mapped drives,scripts assigned applications, you know that.

the most important is permissions but if you've setup permissions by group association and documented it, you know what groups the user belonged to its just a matter of adding the new user account to the appropriate groups. Not much more effort than a new hire.

Note, you can take the users old corrupted profile and make a new user account using only portions of the corrupted profile. Microsoft Help and Support has an article on this. See MS KB 811151 for how to do this.

http://support.microsoft.com/kb/811151/

This discussion is closed to new replies.