Windows Forum

Ask something
Discussion Locked

Domain User Logon to a Domain Computer

0 helpful
4 replies

by newintown

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
A domain user tried to logon to a domain computer X and get a "User Environment" dialog box stated "Windows cannot log you on because the profile cannot load. Contact your network administrator. Detail-Access is denied. He was able to logon other domain computers with his domain user account. He also can logon to the computer X locally using his local user account in X. I have check his user account and group properties and did not find any possible problem. Will appreciate any help to solve myproblem.

4 replies

by eau

Check out technet article

Roaming Profiles Do Not Load, Generate Errors 18 and 1009 (Q266446)

This might point you to a direction to solve your problem.

by joseph moore

Wait: a user with a domain user account (DOMAIN\BOB for example) tried to log onto a DC, and it did not work. This same user account COULD log onto other domain member computers (NT4 Workstation/2000 Pro?). Also, this same user used a local computer account that existed on the DC to log in (a different account than their DOMAIN\BOB account) and they were able to log in?
Right so far?
Ok. Normal Domain Users CANNOT log into Domain Controllers. Only user accounts that belong to Administrators or Server Operators can log into a Domain Controller (a member of Domain Admins might be able to log in also, but I don't remember for sure).
So, this domain user account (DOMAIN\BOB) does not belong to the right group to be able to log into the DC.
Either add this user account to Administrators or Server Operators (I would do the Server Operators group, personally), or tell the user to stop trying to log into the DC.
IMO, "domain users" should NEVER log into a DC, but that is a discussion for another day!

Hope this helps.

This discussion is closed to new replies.