Active directory for windows server 2k3

[Raybdbomb]

I have 6 computers behind a router on my cable modem. 5 of them are windows xp and the last is windows server 2003. I recently decided to set the 2k3 machine up as a domain controller for an active directory.

My motivation for doing this was so that people could use the same username/password on each of the computers without having to make the account on each computer...

Anyway, so I'm setting it up, and I don't have a domain (.com .net or other), and since it was just going to be on my private network (192.168.*) I thought I should just do a private address like I chose, "nix". The name of the computer is "shinra".

I set it up what looks correct, but when I go to logon with another computer, I get the error message that "The system cannot log you on now because the domain NIX is not available."

I'd like to get this working, could someone point me in the right direction to get this set up? Thanks

 

[ktwebb]

Re-add the computer account to the domain. I usually do it from the workstation itself.

 

[Raybdbomb]

before i saw you replied, i reloaded win2k3 server on the server machine because of a technical problem. I then readded the workstation to the "nix" domain and when trying to logon it gives the error message:

The local policy of this system does not permit you to logon interatively.

Checked this site, looked like it's helping but we'll see for sure

 

[Raybdbomb]

i did exactly what it said, except for
"secedit /refreshpolicy machine_policy /enforce" because it didn't work on the win2k3 console. it gave the error message

The syntax of this command is:

secedit [/configure | /analyze | /import | /export | /validate | /generaterollback]

C:\Documents and Settings\Administrator>

 

[stash]

The 2003 GPO refresh command is much simpler:

gpupdate /force

 

[stash]

By the way, you usually get "domain cannot be found" errors when there are DNS problems. Make sure the client is only pointing to the domain controller for its preferred DNS server. Alternate should be left blank, unless you have another DC.

 

[Raybdbomb]

works like a charm now, thanks

 

[SDrubixcube]

what do you think of active directory all together good or bad idea.???

 

[SDrubixcube]

i have 2k3 ent edition and have dabbled with a/d on a cd microsoft gave me in one of my classes that simulates a/d with 30 differant domains and you can set and write gpo's and all kinds of cool things. but what i dont like is when it gets pushed down from the net admin it goes to everyone and it is hard to single out just one domain.?? why do you think microsoft didnt think of this problem.