user cannot login windows 2000 machine

Check to see if the user has logon rights to the local box(2K). Try loging the user in using domainname/username configuration in the login box, it might be finding the user's name in some other domain or on the local box and is having conflicts. This way it points specifically to the user in the domain. Hope this helps.

Later

I would check the permissions on the local machine to see if either his username or a group he belongs to has the right to login to the local machine. Go to Local Security Policy unser the Control Panel and select Local Policies and user rights assignments. You'll see the Log On Locally settings there.

Hope this helps.

Apart from the usual logon rights with regard to the w2k machine, I would also check the NT Server Account properties of this user.

In User Manager for Domains, double click the user's account name.

1. In the User Properties windows that opens, click on the "Logon to" button.
In the "Logon Workstations" window that opens, select "User May Log On To All Workstations" radio button.

2. Ensure that there are no restrictions with regard to Logon Hours for this user(although this must already be selected as your user can log on to the domain from his 98 Machine).

3. If the above doesn't work, and you are sure that the w2k properties for user logon have been configured properly, then delete the account on the NT Server and recreate it. Reset the W2K properties with regard to log on locally rights for the new user Account and try again.

Best Regards,
Nigel.