Domain Policy Changes Automatically - Blocks access to DC


I recently setup a new Windows 2003 domain with about fifteen Windows XP SP1 workstations.  These PCs were migrated from a Windows 2000 domain.  I took the Windows 2003 Domain Controller Policy from another one of our networks with exactly the same setup, just a different domain name.  The network policies seem to work fine until several hours later when the users cannot access the DC (also our file server).  I double-checked the policy and block inheritance is checked, and the policy does not seem to change.  If I re-import the old policy and run gpupdate to refresh it, and the users login/logout it works fine again until a few hours later when access is blocked to the server.

I am not running any firewall software and the Windows XP firewall is disabled.  All PCs can see each other and connect at all times, even when they cannot connect to the DC.

Does anyone have any suggestions to resolve the problem, or determine the source of the problem?

Thanks for your help!

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.


If you have not already started useing it, download GPMC from microsoft downloads.  In there you can run a result of policy against and machine based on the current logged on user or anyother user.

reset your machine so that it works wioth the steps above and run a report.
then check in 90 min to see if the issue returns.  90 min is the defult gprefresh period.

once the issue returns run the report again and compare the two reports.

In most cases you will clearly see where the the change is comming from and can then change it.

If you need help just post back...  

psuwtbAuthor Commented:

Thanks for the advice but I was able to solve the problem on my own.  As part of the migration process, I left the old DC running.  The only difference between the new DC and the old one to the rest of the workstations, was a different IP address.  This causes numerous conflicts.  Once I removed the old DC was the network and changed it's IP and hostname, the problems resolved on there own.

Wow yea that will cause alot of issues.

It is a good idea to leave the old server around for a bit just to mak sure but alway pull the network connection.

Its the silly things that get us all the time.

Closed, 200 points refunded.

Community Support Moderator
Experts Exchange

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.