Windows 7 Workstations 'losing domain'

I have about 25 workstations - all the same hardware .. all about 3 months old ... all Windows 7 SP1, 64 bit ... all part of a windows domain.  Over the last couple of months I've had about 4 of them just simply lose their association with the domain.  

Computer starts and the only login option is the local admin account.  When I login and look at the users folders, I see two for each user ... where as prior there was one folder for each user.  Now there is an additional folder for each user with the domain name tagged on as an extension.

xxx
xxx.domain

(as a side note, I noticed the newly .domain folder has today's date but a time of 12:27pm (into the future 1/2 day) but the system clock looks right... not sure if this has any meaning)

What I've been doing to this point is logging in as the local admin, removing folder xxx and renaming xxx.domain back to xxx.  After rebooting I get option to login as the domain user again and this seems to get almost everything back to normal.   Windows and Office need to be reactivated after this.

Anyone have any ideas what could be causing this?
LVL 1
Tom FI.T. and Support Staff ManagerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

strivoliCommented:
Fully scan you system with an updated AV.
0
Tom FI.T. and Support Staff ManagerAuthor Commented:
AV is kept updated - Symantec Endpoint Protection.  I haven't run a scan on this machine today but on the 1st and 2nd machines to do this, I gave them the once over with about 4 different AV/Anitmalware products and no detection.
0
strivoliCommented:
Do the Windows Application and/or System Logs (run eventvwr) report any usefull Warnings/Errors entries?
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

Tom FI.T. and Support Staff ManagerAuthor Commented:
I'm about to check events ...

Something else that has happened each time that's peculiar - not sure if its a clue.

when i setup each of these machines i had to re-letter all the drives (dvd, card reader, etc.) so they didn't interfere with mapping network drives.   whenever this happens, these drives go back to their default letterings.
0
strivoliCommented:
Could you list the drives and letters associated? Such as:
Internal HDD -> C:
DVD -> D:
and so on...
0
Tom FI.T. and Support Staff ManagerAuthor Commented:
HDD -> C
HDD part 2 -> D
DVD -> E
Network-> F
Network-> H
Network-> M
(Card Reader) -> T
(Card Reader) -> U
(Card Reader) -> V
(Card Reader) -> W
0
R. Andrew KoffronCommented:
I'd try the following.
remove them from the domain,
Completely get rid of the profile folders. cut and paste them into a storage location out of the C:\Users, (do this as an administrator while in a work group).
MAke sure you have taken ownership and applied read/write permissions to all user folders. if you don't just delete them. (better to just keep data files and loose all the other profile stuff)
Scan for AV and Spyware as Local Admin. in safe mode
reboot a couple times in a work group.
re-add them to the domain using the domain.local
set a system restore point and soon as it's back in the domain.
0
SamCommented:
Do whatever you do first to fix everything.

After that, take them out of the domain and then reset the computer accounts from AD.

If this doesn't work, delete the computer accounts from AD for these PCS and rejoin them.
0
Tom FI.T. and Support Staff ManagerAuthor Commented:
I will try all suggestions, but so far this has happened to 4 different machines .. never the same one twice.  What I'd really like to know is what is CAUSING this so I can prevent it from happening in the future to different machines.
0
David Johnson, CD, MVPOwnerCommented:
If the time is off by more than 15 minutes then they won't be able to login.
0
Tom FI.T. and Support Staff ManagerAuthor Commented:
The domain time is set correctly
0
David Johnson, CD, MVPOwnerCommented:
you previously stated that the time stamp of a file was in the future!  Ergo the time was off when that computer tried to login.
0
Tom FI.T. and Support Staff ManagerAuthor Commented:
Ok, you said that If the time is off by more than 15 minutes then they won't be able to login.

But that doesn't usually just throw the machine off the domain does it?
0
David Johnson, CD, MVPOwnerCommented:
The machine can't authenticate either.
0
Tom FI.T. and Support Staff ManagerAuthor Commented:
Yes, If there is no connection to the domain it cannot authenticate.
0
R. Andrew KoffronCommented:
I've never seen a machine loose the domain. not even in Windows NT 3.5 or NT4 days. even if the account is deleted on the server. but seen plenty of bad machine profiles.  I'm totally guessing. maybe somehow a system restore was launched.

not being able to authenticate. doesn't change domain membership.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Tom FI.T. and Support Staff ManagerAuthor Commented:
it does seem like thats what happened - but i have system restore disabled across the domain via GP.  I'm not even sure a restore point exists.  Hmmmm...
0
R. Andrew KoffronCommented:
well obviously, if there was a restore point, it was prior to domain join, so GP would be Not applicable.
0
Tom FI.T. and Support Staff ManagerAuthor Commented:
...and if I'm not mistaken - windows 7 startup repair can run restore...
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.