Solved

upgrade from nt to s2003 r2 workstation authentication error

Posted on 2006-10-19
4
409 Views
Last Modified: 2008-02-01
upgrade from nt to s2003 r2 workstation join new domain all work fine but some get name change error access denied
we joind a work group on the workstaion and then rejoined the domain. out of 250 systems we have 3 that had the problem we buit a new system with a new sys id it worked for a day and is now locked out again? thanks for your help
0
Comment
Question by:wkait
  • 2
  • 2
4 Comments
 
LVL 63

Accepted Solution

by:
SysExpert earned 500 total points
ID: 17767013
I would remove all 3 from the Domain, and wait until the changes replicate to all DCs, then try to add them back in.

Also run any tools to test for corruption of AD from the Resource lits.

I hope this helps !
0
 

Author Comment

by:wkait
ID: 17768796
We are now having users that were working fine getting kicked off the network we even had laptops that the nic was disabled we re-enable the nic while loged in we then had access to the net work drives. Then I loged off and loged back in tried to access the net work could not and the nic had been disabled again.
0
 

Author Comment

by:wkait
ID: 17768850
We did remove from the Domain and tried to rejoin but got a computer name change error and could not rejoin the Domain I then reset the password and then I was able to join the Domain but after a short time I lost net access and on reboot recived access denied. what tool can I use to check the AD for corruption?
0
 
LVL 63

Expert Comment

by:SysExpert
ID: 17773526
Tools Available in Windows 2000 Support Tools
From the resource kit  help for win2k
--------------------------------------------------------------------------------

Many of the following tools were included in previous Windows Resource Kits, but are now part of the Windows 2000 Support Tools, located on the Windows 2000 operating system CD-ROM in the \support directory. The Support Tools must be installed separately from the Windows 2000 operating system.

Each Support Tool is listed below by both its filename and its friendly name, if it has one, to facilitate finding the tool.

Tool Description
Acldiag.exe: ACL Diagnostics  Outputs information on security attributes on Active Directory objects.
Active Directory Replication Monitor (Replmon.exe)  Displays replication topology, status and performance of Active Directory domain controllers.
Advanced Power Management Status (Apmstat.exe)  Determines a computer's ability to exploit power management features in Windows 2000.
ADSI Edit  Microsoft Management Console snap-in that acts as a low-level editor for Active Directory.
Apmstat.exe: Advanced Power Management Status  Determines a computer's ability to exploit power management features in Windows 2000.
Browstat.exe: Browser Status  General purpose network-browser diagnostic tool.
Clonepr.dll: ClonePrincipal  Creates clones of Windows NT 4.0 users and groups and migrates them to Windows 2000.
Depends.exe: Dependency Walker  Displays a hierarchical diagram of the dependent modules of an executable or DLL.
Dfsutil.exe: Distributed File System Utility Helps administrators diagnose the Distributed File System from the command prompt.
DiskProbe (Dskprobe.exe)  Allows users with Administrator privileges to directly edit, save and copy data on the physical hard drive that is not accessible in any other way.
Distributed File System Utility (Dfsutil.exe) Helps administrators diagnose the Distributed File System from the command prompt.
Dnscmd.exe: DNS Server Troubleshooting Tool  Enables user to administer and obtain statistics from local and remote DNS servers.
Dommig.doc: Planning Migration from Microsoft Windows NT to Microsoft Windows 2000  Guides administrators through the planning process for migrating Windows NT domains to Windows 2000.
Dsacls.exe  Facilitates management of access-control lists for directory services.
Dsastat.exe: Active Directory Diagnostic Tool  Compares and detects differences between naming contexts on domain controllers.
Dskprobe.exe: DiskProbe  Allows users with Administrator privileges to directly edit, save and copy data on the physical hard drive that is not accessible in any other way.
Dumpchk.exe  Verifies that a memory dump file has been created correctly.
File and Directory Comparison (Windiff.exe)  Compares two text files or folders and displays differences.  
Filever.exe  Displays version information on executable files.
Gflags.exe: Global Flags Editor  Allows user to edit NtGlobalFlag settings for the Windows 2000 operating system.
Kerberos Keytab Setup (Ktpass.exe)  Configures an account for a non-windows-based Kerberos service and generates a keytab.
Kerberos Setup (Ksetup.exe)  Configures a computer for using a non-windows-based Kerberos realm.
Kill.exe: Task Killing Utility  Allows user to terminate selected tasks or processes.
Ksetup.exe: Kerberos Setup  Configures a computer for using a non-windows-based Kerberos realm.
Ktpass.exe: Kerberos Keytab Setup  Configures an account for a non-windows-based Kerberos service and generates a keytab.
Ldp.exe: Active Directory Administration Tool  Allows users to perform LDAP operations against any LDAP compatible directory such as Active Directory.
Memsnap.exe: Memory Profiling Tool  Takes a snapshot of memory resources consumed by running processes.
Movetree.exe: Active Directory Object Manager  Moves an Organizational Unit from one domain tree to another.
Msicuu.exe: Windows Installer Cleanup Utility  Removes registry settings for applications installed with Windows Installer.
Msizap.exe: Windows Installer Zapper  Removes registry settings for applications installed with Windows Installer.
Netdiag.exe: Network Connectivity Tester  Tests the state and functionality of a network client.
Netdom.exe: Windows 2000 Domain Manager  Enables administrators to manage domains.
Network Connectivity Tester (Netdiag.exe)  Tests the state and functionality of a network client.
Nltest.exe  Administers and tests domains and user accounts.
Planning Migration from Microsoft Windows NT to Microsoft Windows 2000 (Dommig.doc)  Guides administrators through the planning process for migrating Windows NT domains to Windows 2000.
Pmon.exe: Process Resource Monitor  Shows per-process usage of CPU and memory.
Poolmon.exe  Monitors memory tags, including total paged and non-paged pool bytes.
PPTP Ping: Point-to-Point Tunneling Protocol Ping Utilities  Verifies that the required protocol and port for Point-to-Point Tunneling Protocol are being routed from a PPTP client to a PPTP server.
Process Resource Monitor (Pmon.exe)  Shows per-process usage of CPU and memory.
Pviewer.exe: Process Viewer  Displays information about a running process and allows you to stop it.
Reg.exe: Registry Management Utility  Manipulates registry entries on local or remote computers from the command prompt.
Remote.exe: Remote Command Line  Runs command-line programs on remote computers.
Repadmin.exe: Replication Diagnostics Tool  Assists administrators in diagnosing replication problems between Windows 2000 domain controllers.
Replmon.exe: Active Directory Replication Monitor  Displays replication topology, status and performance of Active Directory domain controllers.
Rsdiag.exe: Remote Storage Diagnostic Utility  Examines Remote Storage (HSM) databases and displays diagnostic information.
Rsdir.exe: Remote Storage File Information Utility  Examines Remote Storage reparse points and displays Remote Storage information for files.
Sdcheck.exe: Security Descriptor Check Utility  Displays the security descriptor for an object, including any inherited ACL's, as well as the security descriptor metadata.
Search.vbs  Performs a search against an LDAP (Lightweight Directory Access Protocol) server.
Security Administration Tools (SIDWalker)  Manages access-control policies.
Security Descriptor Check Utility (Sdcheck.exe)  Displays the security descriptor for an object, including any inherited ACL's, as well as the security descriptor metadata.
SIDWalker: Security Administration Tools  Manages access-control policies.
Snmputilg.exe: SNMP Troubleshooting Tool  Queries a Simple Network Management Protocol host or community for Management Information Base values from graphical user interface.
Task Killing Utility (Kill.exe)  Allows user to terminate selected tasks or processes.
Tlist.exe: Task List Viewer  Displays a list of IDs, names, and windows of processes running on the local computer.
W2000msgs.chm: Windows 2000 Error and Event Messages Help  Provides explanations of Windows 2000 error messages.
Windiff.exe: File and Directory Comparison  Compares two text files or folders and displays differences.
Windows 2000 Domain Manager (Netdom.exe)  Enables administrators to manage domains.
Windows 2000 Error and Event Messages Help (W2000msgs.chm)  Provides explanations of Windows 2000 error messages.
Windows Installer Cleanup Utility (Msicuu.exe)  Removes registry settings for applications installed with Windows Installer.
Windows Installer Zapper (Msizap.exe)  Removes registry settings for applications installed with Windows Installer.
Wsremote.exe: Winsock Remote Console  Starts a console application on the server and connects to it from the client using sockets or named pipes.


I hope this helps !
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now