markgoodall
asked on
Can't login to Windows2000 domain with Windows7
I've got a Windows 2000 Server domain with some WindowsXP-Pro computers. All working fine.
I have a new Windows7-Pro computer and was able to name the computer and join the domain.
I can login to the PC as domain administrator (using "DOMAIN\user" syntax) and that works just fine. But if I try to log into the new computer as a domain user, I get the following:
The trust relationship between this workstation and the primary domain failed.
When I go to the Control Panel and try to add the user as an administrator to the computer, I get:
The user could not be added because the following error has occurred:
The trust relationship between this workstation and the primary domain failed.
I have a new Windows7-Pro computer and was able to name the computer and join the domain.
I can login to the PC as domain administrator (using "DOMAIN\user" syntax) and that works just fine. But if I try to log into the new computer as a domain user, I get the following:
The trust relationship between this workstation and the primary domain failed.
When I go to the Control Panel and try to add the user as an administrator to the computer, I get:
The user could not be added because the following error has occurred:
The trust relationship between this workstation and the primary domain failed.
I would suggest you remove this computer from the domain, delete the Computer from active directory, and re-add the machine. Are all your DNS settings in check?
ASKER
I've tried un-joining from the domain (going back to a workgroup) and the re-joining the domain, but it hasn't helped.
It says that the Windows7-Pro computer is part of the domain, and I can log in as the domain admin, but I just can't log in as a domain user.
It says that the Windows7-Pro computer is part of the domain, and I can log in as the domain admin, but I just can't log in as a domain user.
When you go back to a workgroup, did you make sure the computer account is no longer in active directory? Are you still getting the error message:
The user could not be added because the following error has occurred:
The trust relationship between this workstation and the primary domain failed.
The user could not be added because the following error has occurred:
The trust relationship between this workstation and the primary domain failed.
ASKER
Thanks, I tried that. Even tried using new computer names. Doesn't solve it.
ASKER
DNS looks fine. I can join the domain effortlessly, just can't login as a domain user, only domain admin.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
What happens if you turn off UAC temporarily? Does that affect the user's ability to log on?
... Thinkpads_User
... Thinkpads_User
Sounds like the Local security Policy to me as well, check the link DedPoet posted. Looks like it should do the trick.
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.