Link to home
Start Free TrialLog in
Avatar of iwalmsley
iwalmsleyFlag for United States of America

asked on

Domain Connection Issues

Working with a new network.. Replacing an old network.
9 client machines, configured to login to the domain will now not log onto the domain. the domain is the same as before, there is no change.
The clients are running Windows 2000 Pro, we cannot log in via the domain, and can not login via the XXXXX (this computer) option in the login screen.
Is DHCP needed to have the server reconize these workstations? If so, how can I configure the computers to find the DHCP server? The internal IP of the DHCP server never changed, but when we try to login it says the domain can not be found or contacted.
The second server (fresh install) can connect to the first server via login and does successfully, but DHCP is not needed because it has a static IP because it's a server.
Please HELP!!!
Avatar of iwalmsley
iwalmsley
Flag of United States of America image

ASKER

I bootdown all computers, including DHCP server and nothing happens. usually when you reboot the computer asks for an IP and accepts the IP before you even login to the domain right? DHCP is not even seeing those computers when they turn on.
To make things even stranger,  one client is assigned an ip 10.0.0.11 but cannot login to the domain because it does not exsist or cannot be contacted.
added comment:
We reset passwords to: password and checked 'user must change password at next login'
we login proper username and the password, it states that user must change password.
When you try to change password it says, the domain XXXXX is not available.
When you type in the incorrect password it knows to tell you  that your password is incorrect.
check, if any other dhcp server is running in your network. if yes, kill it.
if there is any router, do you use dhcp proxy in any kind?
is dhcp configured to offer the dns-servers?
are theses dns-servers dc's?
log in with on a workstation with local administrator and check "ipconfig /all" in a cmd windows.
ASKER CERTIFIED SOLUTION
Avatar of Paul Knight
Paul Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Reformated both Win2K servers. We had an intrusion to the network and it deleted the exchange data bases and AD.  Both servers are new fresh installs. Same hardware. Same domain name.
I set DHCP up using the Configure Your Server, then went in and added a scope 10.0.0.11 - 10.0.0.99. My servers/printers/firewall reside on 10.0.0.1 - 10.0.0.10
The only address being leased is to one machine a WindowsXP machine, but it cannot log into the network, same error.
I cannot log onto the machines locally, because the owners of the business do not know the password to get in locally. I took over for a very unorganized tech and business. They don't even have the Windows 2000 Pro OS disk for me to do fresh installs of the workstations.
YES YES YES!! The SIDs are wrong for the domain, I have found that error in the Event Log!
Paul, if I cannot logon to the machine locally, is there a program out there? How can I get pass the login prompt, if I have been locked out?? I CANNOT login to these machines locally at all. I've tried all passwords, all usernames. everything.
But the SID idea is what I am thinking is the problem BECAUSE it is a fresh install!!!!!!!!
The DC is the DHCP & DNS server.
It is the only DHCP server in the domain.
walmsely...

you can use a little tool called passware http://www.lostpassword.com/windows-xp-2000-nt.htm I have found it a valuable tool for my administrators pack :))) You really need local access to the boxes to re-join the new domain.  remember if and when you do re-join a new profile will be created on the local computer so any work that had been saved perviously in the useres mydocuments will still be on the old profile.. you will again need to logon on as administrator and copy the work over..  that is if a GPO wasnt securing the local drives. or are roaming profiles being used?????  The other option is to format the local boxes but again you have the issue that if work is stored on the local drives...

hope this helps and GL :))

Paul Knight
Network Consultant
MCSE 2000/2003, CCNA, CompTIA Secutiy +, Linux +
>> or are roaming profiles being used?????

No, but that's a good idea, any good guides for me to impletment that after I get this problem done?

I think knightfox has my answer, let me reformat a machine and check.
to reset a local administrator password, you can use Erd Commander to boot from.
its pretty basic stuf

http://support.microsoft.com/default.aspx?scid=kb;en-us;302082&sd=tech

read that and create a share on either the primary drive or in another partition called Users, the sub dir called Staff - Managers - Cleaners ect, these should reflect the OU structure in AD.

under each folder create Profiles and Work then setup each user to use these folders. should stop any future probelms :))

Paul
knightfox:

thanks for all your help. There is an exchange question I have in that forum 500 points????????
https://www.experts-exchange.com/questions/21189072/Exchange-Server-2000-SMTP-Sending-Mail-problem.html

THANKS!