• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 348
  • Last Modified:

Deloying a windows 2003 domain but user seems unable to change own passwords

hello i am deloying my first windows 2003 domain, when i add users and set change password first time log on, the users log on and get the message saying must change password but when they try the get a error saying server not avaible. any idea what this could be??
0
drepton22
Asked:
drepton22
  • 5
  • 5
  • 2
  • +2
1 Solution
 
imnajamCommented:
Hi drepton22,

it could be due to network bottleneck, create a tmp user without password expiry, logon and then alt+ctrl+del and change password see if it's working.
also try ping to your domain for about 100 times and see if there is any packet loss or any delay

Cheers!
0
 
drepton22Author Commented:
just did this and cant change password that way aswell, also placed the user pc and domain server and a hub and there own and still cant change it. done a ping no bits lost :(
0
 
victornegriCommented:
Make sure the server is pointing to itself as a DNS server (primary DNS) and nothing else. Set a forwarder in the DNS snapin to your ISP's DNS server. Restart the Netlogon service on the server to re-register all the stuff in DNS. Try again. Most likely, some info in DNS is missing.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Dushan De SilvaTechnology ArchitectCommented:
Please check any other domain in the network, which you have added for testing pursopses with same name.

BR Dushan
0
 
imnajamCommented:
how did you ping ? I mean did you ping the ip or domain name, if it were ip than try pinging the domain name like,

ping yourdomain.local
or
ping yourdomain.com

whatever it is, and check if the reply is coming from right ip address, if not it is said to be DNS problem check your client dns setting as well as dns server.
0
 
hack-4-goodCommented:
on the workstation, make sure its only DNS server in network settings is the ip address of your 2003 server... let 2003 forward it out...

it could be that your workstation is calling out to the ISP DNS server asking to resolve 'myserver.local' and not getting an answer.

i've had this same thing happen lots of times and the above worked for me...

but last week i had it happen with an xp pro workstation as a member of a 2000 domain... couldn't for anything get it to work though, ended up formatting the xp box.

make sure the workstation is a member of the domain, make sure the workstation can resolve the name of your server and the name of your domain (ping them)...

also, make sure the workstation is registered in the DNS server of your server...

also, in network properties of the workstation (i dont recall you saying a windows version) look for 'enable netbios over tcp/ip' and select that.  if that is set to disabled, that would hurt this too.

0
 
drepton22Author Commented:
right setting up the DNS work and able to change password etc, but then the DNS seems to have stop working(unable to add computers to the domain) this could be because i have not set up right, i just want to forward to my ISP thought that would be simple. can someone confirm how to set up a dns for forwarding
0
 
victornegriCommented:
To set a forwarder:
Launch your DNS MMC
Right-click your server and select Properties
Click on the "Forwarders" tab
Enter the IP address of your ISP's DNS Server and click Add
Click OK.


What happens when you try to add a computer to the domain? What error message pops up?
0
 
drepton22Author Commented:
domain could not be contacted and the following information is given

Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

The domain name kings-southsea might be a NetBIOS domain name.  If this is the case, verify that the domain name is properly registered with WINS.

If you are certain that the name is not a NetBIOS domain name, then the following information can help you troubleshoot your DNS configuration.

DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain kings-southsea:

The query was for the SRV record for _ldap._tcp.dc._msdcs.kings-southsea

The following domain controllers were identified by the query:

king.kings-southsea

Common causes of this error include:

- Host (A) records that map the name of the domain controller to its IP addresses are missing or contain incorrect addresses.

- Domain controllers registered in DNS are not connected to the network or are not running.

For information about correcting this problem, click Help.
0
 
victornegriCommented:
1) Make sure the DNS information is correct on "king". Make sure it's pointing to itself for DNS
2) Make sure DHCP is giving out the correct DNS server and WINS server (if you're using it)
3) Make sure the DNS service is running
4) Attempt to ping "kings-southsea", "kings-southsea.com" (or whatever your domain name is), "king", "king.kings-southsea.com", <ip address of king> and post the results here.
5) Restart the netlogon service on "king" (I'm assuming this is also your DC)
6) Try using the FQDN of your domain when adding a computer to it (i.e. kings-southsea.com)
0
 
drepton22Author Commented:
1)king is looking at its self
2)have set the test PC to static at the moment
3)have gone to services and yes it is running
4)ping kings-southsea time out, ping king.kings-southsea is fine, ping king is fine
5) done
6) not 100% sure what you mean

still not work :(
0
 
victornegriCommented:
4) Make sure you have an "A" record in your domain's zone called "Same as parent folder". This should be pointing to the ip address for "King". Looks like you don't have it. Also, what happens when you ping your full domain name?
6) Instead of typing "kings-southsea" in the domain field when you join the computer to the domain, type "kings-southsea.com" (or whatever your fully qualified domain name is)
0
 
drepton22Author Commented:
seems to be going fine now using fully qualified domain, move on to exchange 2003 now :) thanks for your help
0
 
victornegriCommented:
Great! Glad I could help. Thanks for the points.
0

Featured Post

Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

  • 5
  • 5
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now