Setting up a new domain user remotely

hmcnasty
hmcnasty used Ask the Experts™
on
Hi. I rebuilt a clients PC.  I created a PPTP tunnel back to the dc and got the rebuilt pc on the domain through the tunnel.
Is there anyway of logging in as a domain user on the newly rebuilt PC? Obviously if the first login does not see the DC then it will not create the profile.  Is there a way around this?
XP pro to server 2003


Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
You need to logon as the local admin to the machine .. join the domain then you can log on as the user.  If you are using RDP you should still be able to get to the machine to log in as the local admin.

Author

Commented:
I've logged on as a local user and joined the domain through the PPTP tunnel.  

If I try to log on as a domian user it won't login because the domain is not present.  The reason is because one can't establish the PPTP till after you're logged  in as a user.

Is there a way around this?

Author

Commented:
Im not using RDP for anything. My goal is to get a domian  user setup on this PC remotely?

11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Most Valuable Expert 2012

Commented:
Check DNS. Usually,  when I have run into that problem, it was DNS related.
Most Valuable Expert 2012

Commented:
Check DNS. Usually,  when I have run into that problem, it was DNS related.

Author

Commented:
Dude, I'm not explaining it properly and I don't know how to explain it any differently. DNS has nothing to do with what I'm asking.
Can you log onto another machine on the network then use RDP to get to that machine?
Most Valuable Expert 2012

Commented:
DNS may have everything to do with it. When the user for the domain tries to log in, the remote box looks for the DC. So, it is looking for domaincontroler. Youdomain.local, for instance. If it cannot find it because the DNS is not setup to only use the vpn's (or the VPN  was not configured to give out you LAN DNS server as the DNS server), then you won't be able to sign in because the remote box cannot find the DC to authenticate with.

Author

Commented:
Hi. I'll try to explain it a bit better.

1.  I'm at my house
2. I have a brand new PC with XP pro installed on it.
3.As all new PCs it was a member of a workgroup called "workgroup"
4. In network connections from the new xp pro box at my house I built a PPTP tunnel to a client's location who is running server 2003.
4. I was then able to join the XP pro PC at my house to the remote domain through the PPTP tunnel.
5. After joining the domain I rebooted the XP pro PC at my house as one has to do after joining a domain.
6. From the XP pro box at my house, I want to log in as one of the domain users on the domain I just joined however, this is not possible because the XP pro box at my house cannot see the domain (which it needs to do the first time a user logs into a domain from a new PC) The only way to see the domain is to log into the XP pro box at my house  as a local user and connect the PPTP tunnel I built earlier. This however defeats the purpose of what I'm trying to so which is setup the domain user on the XP pro pc at my house.
 Is there a way to setup a domain user on the XP pro PC at my house?

Author

Commented:
Dr. Damitt you are correct in that respect but how is the PC going to see the domain controller from my house.  (before I login)

Author

Commented:
Sorry it's Dr. Damnit.

Author

Commented:
For instance, is there a way to establish the PPTP tunnel when the PC boots up instead of after logging in?  That would solve my problem because then the PC would see the DC when it was trying to log in as the domain user.

Depends on what you are using for PPTP.. if it is windows then no.
ERP System Manager
Commented:
I cannot remember exactly, but I think that I have done this in the past.  On the front screen of Windows XP, you need to use the option "logon using dial up connection".  The PPTP tunnel that you created, needs to have had the option "allow all users of this pc to use" ticked for this to work.

Regards
Mark
Commented:
Mark is right, if you create a new Windows PPTP session for all users, then the "log on using dial up connection" should be available, and you should be able to log in to the domain.

Alternately you can enable pptp sessions to remain active across log ons, then connect the pptp, then log off, then log on as the domain user.

Add a new string value named KeepRasConnections to the following registry key:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlog
Set the string value for KeepRasConnections to 1.

Here is an MS article about this.

http://support.microsoft.com/kb/176575
Most Valuable Expert 2011
Top Expert 2011

Commented:
"Depends on what you are using for PPTP.. if it is windows then no."

Actually, once you connect back to the domain via the tunnel, if you go to c:\program files\internet explorer\iexplore.exe, and Right Click it>"Run As", and use thier DOMAIN credentials, they should be able to logoff, and logon as that user once the app launches, as it would have cached the credentials......

If not using IE6, *might* need to do this one somehting like c:\windows\regedit, or system32\cmd.exe....

Remember, you need to reach domain for this to work obviously.....
Most Valuable Expert 2011
Top Expert 2011

Commented:
Just to clarify, you will do this being logged in as the local admin.....  :)
Most Valuable Expert 2012
Commented:
Most Valuable Expert 2011
Top Expert 2011

Commented:
What is?
Most Valuable Expert 2012

Commented:
The option on the log on using a dial up / vpn connection. It's a drop down box. See the link I posted.
Most Valuable Expert 2011
Top Expert 2011

Commented:
Yea, I know about that..... Just wasnt sure what you were talking about a drop down for.....

Author

Commented:
Exactly what I was looking for.  I should have been more clear at the beginning.

Thanks
Mark DamenERP System Manager

Commented:
hmcnasty - I understood what you were asking right from the start, hence my first answer was what you needed.  The other person I dont think read your question, as they asked you things you had already answered!

Mark.

Author

Commented:
Thanks Mark.

Wes

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial