asked on 5/3/2006

Active Directory accounts are unable to login

We have 200 + PC running in a workgroup that has the same name as my AD domain. None of the machines are members of the domain. They users login to Novell 6.0 and get all the poilicies from Novell. They need access to our exchange 2k box for their email and another application. Most of the users have no trouble with this setup, although, a select few have been locked out of their AD account (not able to access email etc. ) We dont see anything in the event log on the domain control besides:

"Disabled user /o=Domainname.com/ou=First Administrative Group/cn=Recipients/cn=username does not have a master account SID. Please use Active Directory MMC to set an active account as this user's master account."

But so far the users with that message have not encountered the issue.

Our work around has been to reset the user's password on the DC will fix the issue. Users do not have access to reset their own passwords.

Operating Systems Active Directory

Last Comment

Jandakel2

5/3/2006

Jandakel2

5/3/2006

It sounds like you have accounts that have been removed from AD prior to their mailbox being removed from Exchange. You should remove the exchange features/mailbox first than delete accounts for users.

JK

gmacmaster

5/3/2006

ASKER

The error message I posted was the only warning or error in the event log, I am not sure if it is related.

I have requested the my helpdesk folks keep a running list of the users having this issue to see if their username appears in the log.

Note: all the users have the check box for passwords never expiring.

ASKER CERTIFIED SOLUTION

Jandakel2

5/3/2006

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial