Can't obtain group policies

Posted on 2008-11-11
Last Modified: 2012-05-05
I have several workstations with this error:
Windows cannot determine the user or computer name. (Access is denied. ). Group Policy processing aborted.
They also cannot pull up \\servername as access is denied.
I inheritied this network and the first thing that I did was change all passwords.  I don't know if this condition existed prior to the password change or not.
One server (dns, AD, etc) and 20 workstations.
Question by:classnet
    LVL 13

    Expert Comment

    Remove the computer accounts in AD and I would take them out of the domain and then rejoin using an "add to domain" capable user. Also the server, move DNS to another DC (i assume you have one?) or just let the clients look at either the primary or secondary DNS server. I assume that if you can't do anyhting with this server, it's not servicing anmy clients. I would dcpromo it to remove AD and make it a member server.
    I would then take it out of the domain and then add it again and then DCpromo it again. Perhaps give a bit more info on the server so I can give you a more accurate solution.
    LVL 20

    Expert Comment

    check to see if all the autostarting services on the server have started.
    check if any services used the admin credentials to start and change the passwords accordingly
    can you log in to a workstation as domain administrator ? And then browse?
    Are the computers domain members? using AD users?

    Author Comment

    Sorry leegclystvale...  I can't do this.  

    wolfcamel:  Logging onto the workstation as the administrator still yields the same "Logon Failure: The target account name is incorrect" error.  Computers are domian members with AD users.  All services appear fine and either logon with the Local System Account or a Network Service account.  The workstation logged a KRB_AP_ERR_MODIFIED error.
    LVL 59

    Accepted Solution

    Make sure you have only internal DNS servers listed in TCP\IP properties of the clients and servers. Are you getting Events on the clients or servers? You might need to reset the secure channel machine account of the clients that are having trouble.

    Author Comment

    I have successfully reset the secure channel (from the DC) and still the WS cannot pull up \\servername.

    Author Closing Comment

    I reset the secure channel and it did not work.  Then I logged off the WS and logged back on...  it worked!  GP is working as is \\servername!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
    If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now