Can't obtain group policies

I have several workstations with this error:
Windows cannot determine the user or computer name. (Access is denied. ). Group Policy processing aborted.
They also cannot pull up \\servername as access is denied.
I inheritied this network and the first thing that I did was change all passwords.  I don't know if this condition existed prior to the password change or not.
One server (dns, AD, etc) and 20 workstations.
Sheldon LivingstonConsultantAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

leegclystvaleCommented:
Remove the computer accounts in AD and I would take them out of the domain and then rejoin using an "add to domain" capable user. Also the server, move DNS to another DC (i assume you have one?) or just let the clients look at either the primary or secondary DNS server. I assume that if you can't do anyhting with this server, it's not servicing anmy clients. I would dcpromo it to remove AD and make it a member server.
I would then take it out of the domain and then add it again and then DCpromo it again. Perhaps give a bit more info on the server so I can give you a more accurate solution.
cheers
0
wolfcamelCommented:
check to see if all the autostarting services on the server have started.
check if any services used the admin credentials to start and change the passwords accordingly
can you log in to a workstation as domain administrator ? And then browse?
Are the computers domain members? using AD users?
0
Sheldon LivingstonConsultantAuthor Commented:
Sorry leegclystvale...  I can't do this.  

wolfcamel:  Logging onto the workstation as the administrator still yields the same "Logon Failure: The target account name is incorrect" error.  Computers are domian members with AD users.  All services appear fine and either logon with the Local System Account or a Network Service account.  The workstation logged a KRB_AP_ERR_MODIFIED error.
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Darius GhassemCommented:
Make sure you have only internal DNS servers listed in TCP\IP properties of the clients and servers. Are you getting Events on the clients or servers? You might need to reset the secure channel machine account of the clients that are having trouble.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Sheldon LivingstonConsultantAuthor Commented:
I have successfully reset the secure channel (from the DC) and still the WS cannot pull up \\servername.
0
Sheldon LivingstonConsultantAuthor Commented:
I reset the secure channel and it did not work.  Then I logged off the WS and logged back on...  it worked!  GP is working as is \\servername!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.