Solved

Can join machines to domain, but not login

Posted on 2011-09-07
5
223 Views
Last Modified: 2012-05-12
Out of the blue, I'm unable to log new machines into the domain.  I can join machines to domain, but when I try to log into the domain on them, I get the error "Account Not Found!"

I see the machines have been joined under the computers group when I look in AD, so they are being added.

Disjoining them, renaming and rejoining has no effect.

Know what is up?
0
Comment
Question by:Marketing_Insists
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 250 total points
ID: 36498557
So this happens on every machine?  Check the logs on the domain controllers and check the logs on the machines netsetup.log

More info here   http://technet.microsoft.com/en-us/library/cc961817.aspx

Did anything change that you know of because you said "out of the blue"

Thanks

Mike
0
 
LVL 13

Assisted Solution

by:khairil
khairil earned 250 total points
ID: 36498577
Hi,

Are this new computer? Are you cloning disk from master copy - like using ghost or something like that?

When computer cloned they have same SID and this will introduce error when computer attached to domain and user try to logon. You have to do sysprep prior cloning the image.

Try sysprep that affected computer first, just to know if it is the problem, here is how to do sysprep,:
1. For XP, http://support.microsoft.com/kb/302577
2. For 7, http://technet.microsoft.com/en-us/windows/ee530017

Good luck.
0
 

Author Comment

by:Marketing_Insists
ID: 36499324
Hi, to rule out duplicate SIDs, I did sysprep one and tried newsid (sysinternals) on another - same thing.  Systems are XP
0
 

Author Comment

by:Marketing_Insists
ID: 36499370
resolved: and here it is.

For whatever reason, logging in on XP machines using domain\userName  in the user name field was resulting in the error.

When I used my userName in the name filed, then chose the domain from the drop down, it worked.

Perhaps a recent change to the DCs after a recent patching?, but very strange.

Thanks for the help!
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36499382
yeah that won't work  domain\username

you can also use the UPN to login   username@upnsuffix
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question