Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Can't obtain group policies

Posted on 2008-11-11
Medium Priority
Last Modified: 2012-05-05
I have several workstations with this error:
Windows cannot determine the user or computer name. (Access is denied. ). Group Policy processing aborted.
They also cannot pull up \\servername as access is denied.
I inheritied this network and the first thing that I did was change all passwords.  I don't know if this condition existed prior to the password change or not.
One server (dns, AD, etc) and 20 workstations.
Question by:classnet
LVL 13

Expert Comment

ID: 22929829
Remove the computer accounts in AD and I would take them out of the domain and then rejoin using an "add to domain" capable user. Also the server, move DNS to another DC (i assume you have one?) or just let the clients look at either the primary or secondary DNS server. I assume that if you can't do anyhting with this server, it's not servicing anmy clients. I would dcpromo it to remove AD and make it a member server.
I would then take it out of the domain and then add it again and then DCpromo it again. Perhaps give a bit more info on the server so I can give you a more accurate solution.
LVL 20

Expert Comment

ID: 22930095
check to see if all the autostarting services on the server have started.
check if any services used the admin credentials to start and change the passwords accordingly
can you log in to a workstation as domain administrator ? And then browse?
Are the computers domain members? using AD users?

Author Comment

ID: 22930584
Sorry leegclystvale...  I can't do this.  

wolfcamel:  Logging onto the workstation as the administrator still yields the same "Logon Failure: The target account name is incorrect" error.  Computers are domian members with AD users.  All services appear fine and either logon with the Local System Account or a Network Service account.  The workstation logged a KRB_AP_ERR_MODIFIED error.
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 59

Accepted Solution

Darius Ghassem earned 2000 total points
ID: 22930593
Make sure you have only internal DNS servers listed in TCP\IP properties of the clients and servers. Are you getting Events on the clients or servers? You might need to reset the secure channel machine account of the clients that are having trouble.

Author Comment

ID: 22930842
I have successfully reset the secure channel (from the DC) and still the WS cannot pull up \\servername.

Author Closing Comment

ID: 31515483
I reset the secure channel and it did not work.  Then I logged off the WS and logged back on...  it worked!  GP is working as is \\servername!

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question