A Win2k pro machine in the domain not able to access resources. it must have been in the domain before, and now maybe there is a SID conflect! I try to remove it from the domain a join it back again but it did work. How can I give it a new SID? or How can I know if there are machines in my domain with the same SID?