Windows Forum

Ask something
Discussion Locked

XP pro / Win2K domain, log on problem

0 helpful
14 replies

by hpoppe

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a very strange logon problem. I have a Windows 2000 domain with 34 workstations running W2k and 6 laptops running XP pro. 5 of the laptops work fine, all hve been installed using the same disk image, all machines are identical in hardware. On5 of the laptops users can log on to the domain and everything is OK. On the last laptop I can log on to the domain, but only with the domain administrator accont. If I try another account (with administrator rights or without gives the same result)I get the message that the domain is not accessible because it does not exsist. I am not refused because of iuncorrect password or unknown user, it just claims that the domain does not exist. I do not need to reboot the machine, just log off and then log on again as administrator and logon is successful. I can access all shared folders, print etc. The other user acconts can log on to the domain successfully from all other workstations and laptops, just not this particular one. If this had been a faulty installation or a network problem, I presume this should affect all users, also the administrator account. It does not matter if the useraccount has adminstrator rights, it appears as if the username "administrator" is the only account that is allowed to log on. What could be wrong?

14 replies

by superkknd

here.. try to disjoint from domain
then remove "Client fro Microsoft Networks Service", then restart you PC. Add your Client fro Microsoft Networks Service back, then join back the domain again. hope it helps u

by joseph moore

I just think your XP box is having authentication problems.
Try Technet article Q180094 for the how-to on using the LMHOSTS file to handle authentication. Basically, put in the IP address, machine name and NetBIOS domain name of your Win2K domain in the LMHOSTS file on the XP box. Reboot, and see if that takes care of it. The URL to the article is here:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q180094
(please remove any spaces)

I've used this on an XP machine and it did fixa simiar problem (also works on NT & 2K).

If this is not it, then you might have a misconfiguration in the Local System Policy on the XP box. YOu can tighten the security on XP (and 2K) so that only admins can log onto it. But I think the LMHOSTSis the fix for you.

hope this helps

by hpoppe

I read the article and others too. Some good advice here, but not the help I needed.

by rvkempen

It might be a sid problem.
You have six comps with the same sid.
try using sysprep, reboot, and fill in the information needed by rhe mini setup.
Good luck.
Ron

by hpoppe

It's not a sid problem. Any or all laptops can connect at the same time, the last laptop too, but only with the administrator account. Otherwise it's not refused logon, it cannot find the domain.

by beermonster

Hi,
The issue here is that your laptop is unable to find the domain controller \ s for your domain. The original admin account can log in because it has cached info from an initial login, the OS attempts to contact the domain, can't find it, andlogs on the admin using the cached info. Any other accounts, not having cached info, are rejected. You can confirm the ability to contact your domain by running

ping yourdomainname.com - (or org or whatever your extension is)

You should get areply back from the ip of one of your domain controllers. If not, then check the IP config of the laptop - esp the dns settings.

Note that were you to have no comms at all you would receive the message 'netlogon service not running' - bit confusing that one 'cos it is, it just can't find the network. The netlogon servicve not running at all - as a previous respondent suggested, would stop anyone logging on - including the admin - which is why I'm inclined to believe that name resolution of SRV records is the issue.......

by hpoppe

I don't think so. The log on is genuine, I can ping the domain if I log on locally to the laptop with a user account also, it gets a DHCP assigned adress, ipconfig is normal.

by canucker

remove from domain and re-add. If this don't work re-name computer and try above again.

by hpoppe

Thanks a lot for several good suggestions. I could not spend any more time working this out, so I had to format and reinstall. Now it works, also with any or all of the other laptops connected to the domain.

This discussion is closed to new replies.