Can't logon to domain from WinXP
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Can't logon to domain from WinXP

 
Post new topic   Reply to topic    Windows Server Forum Index -> Security
Author Message
Rich
Guest
Posted: Thu Jan 06, 2005 9:40 am    Post subject: Can't logon to domain from WinXP Reply with quote
Hello,

I have Win2K server with WinXP client at home. I just rebuilt my XP
desktop. Joined domain successfully. However, I can't logon to domain from
the XP desktop. Get message that says my account has been disabled. The
same is true for domain administrator account. I can logon to the domain at
the server w/o problem and verified that accounts are enabled. I even
re-created my domain account and received the same message. Any ideas???

Thanks in advance,
Rich
Back to top
Steven L Umbach
Guest
Posted: Thu Jan 06, 2005 10:54 am    Post subject: Re: Can't logon to domain from WinXP Reply with quote
Verify that the XP computer is configured to use the domain controller as
it's only preferred dns server in it's tcp/ip properties and as shown with
ipconfig /all. The domain controller must point ONLY to itself as it's
preferred dns server. Verify that you can ping the domain controller by IP
address and fully qualified domain name. If you have any software firewall
or other protection software on the computer, disable [ including Windows
firewall] it until the problem is resolved assuming you have a hardware
device protecting the network. Also check Event Viewer on the XP computer
and run the support tool netdiag on it to check for proper name resolution,
network connectivity, and secure channel to the domain controller. I also
assume this is an XP Pro computer as an XP Home computer can not join a
domain or logon to a domain though a user could use it to access domain
resources logging on with domain credentials. --- Steve


"Rich" <rstringer@provide.net> wrote in message
news:eFiQjE68EHA.2788@TK2MSFTNGP15.phx.gbl...
Quote:
Hello,

I have Win2K server with WinXP client at home. I just rebuilt my XP
desktop. Joined domain successfully. However, I can't logon to domain
from the XP desktop. Get message that says my account has been disabled.
The same is true for domain administrator account. I can logon to the
domain at the server w/o problem and verified that accounts are enabled.
I even re-created my domain account and received the same message. Any
ideas???

Thanks in advance,
Rich
Back to top
Rich
Guest
Posted: Thu Jan 06, 2005 11:38 am    Post subject: Re: Can't logon to domain from WinXP Reply with quote
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:O7ph%23u68EHA.3944@TK2MSFTNGP12.phx.gbl...
Quote:
Verify that the XP computer is configured to use the domain controller as
it's only preferred dns server in it's tcp/ip properties and as shown with
ipconfig /all. Yes, this is set. XP is DHCP client to DSL modem. So is
the server. Adding IP of DC as 2nd DNS server.

The domain controller must point ONLY to itself as it's
Quote:
preferred dns server. Currently set to the DSL modem. Will change.

Verify that you can ping the domain controller by IP
Quote:
address and fully qualified domain name. Good reply from Ping.

If you have any software firewall
Quote:
or other protection software on the computer, disable [ including Windows
firewall] it until the problem is resolved assuming you have a hardware
device protecting the network. Windows firewall is off. There is a
firewall on the DSL modem that is active but this was active prior to
rebuild. Everything is on same subnet so I don't think this is an issue.

Also check Event Viewer on the XP computer
Several things here, all look related:
EventID 40960, 49061. Source = LsaSrv.
EventID 24, 29. Source W32Time



Quote:
and run the support tool netdiag on it to check for proper name
resolution, network connectivity, and secure channel to the domain
controller. I also assume this is an XP Pro computer as an XP Home
computer can not join a domain or logon to a domain though a user could
use it to access domain resources logging on with domain credentials. ---
Steve


"Rich" <rstringer@provide.net> wrote in message
news:eFiQjE68EHA.2788@TK2MSFTNGP15.phx.gbl...
Hello,

I have Win2K server with WinXP client at home. I just rebuilt my XP
desktop. Joined domain successfully. However, I can't logon to domain
from the XP desktop. Get message that says my account has been disabled.
The same is true for domain administrator account. I can logon to the
domain at the server w/o problem and verified that accounts are enabled.
I even re-created my domain account and received the same message. Any
ideas???

Thanks in advance,
Rich


Back to top
Steven L Umbach
Guest
Posted: Thu Jan 06, 2005 2:43 pm    Post subject: Re: Can't logon to domain from WinXP Reply with quote
That would be a good start. Here is a link on how to configure dns for an
Active Directory domain including how to enable it to resolve internet names
for internal dns clients. It is OK to use the NAT router as the default
gateway but you really should use the domain controller as the DHCP server
and disable the DHCP part of the router. The domain controller DHCP server
will also have a scope option for domain name that should be used. The
domain controller must use a static IP address also. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382

"Rich" <rstringer@provide.net> wrote in message
news:uw4sdG78EHA.3708@TK2MSFTNGP14.phx.gbl...
Quote:

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:O7ph%23u68EHA.3944@TK2MSFTNGP12.phx.gbl...
Verify that the XP computer is configured to use the domain controller as
it's only preferred dns server in it's tcp/ip properties and as shown
with ipconfig /all. Yes, this is set. XP is DHCP client to DSL modem.
So is the server. Adding IP of DC as 2nd DNS server.

The domain controller must point ONLY to itself as it's
preferred dns server. Currently set to the DSL modem. Will change.

Verify that you can ping the domain controller by IP
address and fully qualified domain name. Good reply from Ping.

If you have any software firewall
or other protection software on the computer, disable [ including Windows
firewall] it until the problem is resolved assuming you have a hardware
device protecting the network. Windows firewall is off. There is a
firewall on the DSL modem that is active but this was active prior to
rebuild. Everything is on same subnet so I don't think this is an issue.

Also check Event Viewer on the XP computer
Several things here, all look related:
EventID 40960, 49061. Source = LsaSrv.
EventID 24, 29. Source W32Time



and run the support tool netdiag on it to check for proper name
resolution, network connectivity, and secure channel to the domain
controller. I also assume this is an XP Pro computer as an XP Home
computer can not join a domain or logon to a domain though a user could
use it to access domain resources logging on with domain
redentials. --- Steve


"Rich" <rstringer@provide.net> wrote in message
news:eFiQjE68EHA.2788@TK2MSFTNGP15.phx.gbl...
Hello,

I have Win2K server with WinXP client at home. I just rebuilt my XP
desktop. Joined domain successfully. However, I can't logon to domain
from the XP desktop. Get message that says my account has been
disabled. The same is true for domain administrator account. I can
logon to the domain at the server w/o problem and verified that accounts
are enabled. I even re-created my domain account and received the same
message. Any ideas???

Thanks in advance,
Rich




Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Security All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB