Win XP Domain Issue

[imported_TopCat]

I'm trying to add computers to a new domain (server is running 2003). I can do so successfully and log into the domain afterwards, but if I try and add users to the a group afterwards (like Administrators), the domain is not seen as a location for accounts so I can't actually add anyone. Even in the cases where it is seen as a location, it won't recognize it, ie Domain\User won't be recognized.

Does anyone have any ideas why this happens? It' pretty important that I start to move people over to our new domain and give them local admin access.

 

[sieistganzfett]

Hi. its late and i cant think right now so hopefully i understand your problem, if not could you help clarify it? hmm. ok. you want to give users admin access?? sorry, but why admin access you want to regular users?? anyway i think your using that as an example...

adding users, this is done so through active directory on your server 03. you add the users in there, specify the name, password, etc. and it shows in the list right? then you go to the workstations that have already joined the domain at this time, log on with their user/password and is that when it gives the error? also, what is the exact words in the errors? you can try support.microsoft for a solution on the error.

 

[imported_TopCat]

More specifially, I get the following messages:

When I run netdiag I get that the DC Discovery Test failed, along with all other tests related to the Domain Controller.

In the Event Viewer I receive the messages:

No Domain Controller is available to service the logon request. Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.

as well as a ton of:

The Security System could not establish a secured connection with the server DNS/dsn1.xxx.edu. No authentication protocol was available.

What boggles me is that I am currently logged onto the domain and have network access to shares and printers. It's fairly crucial I get to the bottom of this, so anyone have any ideas?

 

[blemoine]

do you have the correct DNS server address asigned to these machines? You are trying to add these users to the Workstations local admin group? instead of adding individual users to the local group try adding "domain users" or whatever group they are in.

 

[imported_TopCat]

The DNS servers "should be" correct because they are being assigned by the DHCP server. I'm not quite sure I understand what you are saying next. I was adding Domain\User to the local admin group on their own machine so they could install progs, etc. What do you mean by adding "domain users"?

Thanks for the reply.

 

[imported_BikeDude]

Your active directory parent ("domain server" -- it's no longer called that) needs a DNS server of its own. Install MS' DNS and let every machine on your domain point to it, and only it. (and yeah, you'll need to set up a simple domain for your DNS of course)

 

[blemoine]

Topcat, What is running DHCP. Is it your Domain Controller. Have you setup DNS on your domain controller? if not you should do this now. It should be Active Directory Integrated. after that make sure dhcp assigns that address to all your workstations as the dns address.


Domain Users is the default users workgroup that users get put in when their account is created. if you put that group in the local admin group then any user that logs on will be able to install programs on that particular workstation.

 

[stash]

Run a netdiag /v on both the client and DC. Your DNS is either misconfigured on the DC, or the client is not pointing to the correct DNS server.

 

[Slikkster]

Take a look at this thread on a different website that goes over people's experiences with this error:

http://www.eventid.net/display.asp?even...961&eventno=1398&source=LsaSrv&phase=1