Link to home
Start Free TrialLog in
Avatar of Gerhardpet
GerhardpetFlag for Canada

asked on

Can't login to computer just joined to domain

I have new server 2012 R2 deployed and joined a number of Windows 7 computer which all worked fine. We got two new Windows 10 computers and had no problem joining one of them. The other one worked too but I can't log in. Keep on saying it is the wrong username and password. No matter what username I try with I get the same results. Any ideas what to look for?
Avatar of No More
No More

domain\username  
Password
Avatar of Gerhardpet

ASKER

Yes off course. Not the first time I'm joining a computer to a domain name

This too username@domain does not work which is the same
Avatar of McKnife
People usually get this problem when either their DNS settings are non-standard (at the client) or some network connectivity issue, like 3rd-party-firewalls going berserk, happens.

For a test, make sure that the only DNS entry that is present is that of your DC. If 2 DCs, enter both.
If security software is installed (firewalls, intrusion prevention software, AV with firewall functions) is installed, uninstall it and reboot. Also try to join to the FQDN name of the domain (as in domain.local).
If there would be issues with DNS you wouldn't be able to join computers to domain
I think if it were a DNS problem there would be a message like 'can not contact any domain controller'.  Are you sure caps/num locks are off?  Can you post a screenshot of the error and the username?
It is a brand new computer with nothing installed.

I have already checked on DNS more than once and it is all fine
Please check the computer names of all the Windows 7 machines.  Is there a chance that any two might have the same Computer Name.
Nope also checked on caps and that is not it.

There is not error. Just "The username or password is incorrect. Try again"

I have tried with the actual username and also the admin username. Nothing works
Can you see those computers in Active Directory ?

New servers ? Have you done full setup ?
Can you ping the computer remotely?
Can you RDP into the computer with domain credentials?
Sure, having same IP address as some other machine is also among the most frequent problems. occurs when people mess with DHCP. Use a fixed address that is not in the DCHP range for a test.
Dustin , I think RPD is disabled by default
The server is fully deployed and working for every other user but not to say that something is not configured correctly. I'm not an expert at server configuration but generally, know what I'm doing. Maybe I missed a something
Yes I can ping the computer from the DC
Yes the computer show on the DC
No, duplicate IP address

I notice when I do a nslookup on the system I get

C:\Users\ryangoncalves>nslookup
Default Server:  UnKnown
Address:  192.168.16.6

The IP for the server is 192.168.16.6. Any idea why it would show unknown for the default server?
Default Server:  UnKnown That's ok

192.168.16.6 is this IP address of DC and DNS ?

You could try to remove that pc from AD and rejoin computer to domain
The reason for this is your DNS server does not posses a record for the server itself. Or simply it does not know what is it's own name. By creating a PTR static entry we can fix this and let DNS server know it's own name.

1. Open the DNS management console in the Server
        Start > Administrative Tools > DNS

2. Go to the your Reverse Lookup Zone icon and right click on it and select "New Pointer(PTR)".

3. In the New PTR window enter the  IP address of DNS server and enter(or select) the host name of the server.

4. Now click OK and restart the DNS server service.
I removed the PC from the DC and rejoined and still no luck. I can't login. I even gave a new name
When I right click Reverse Lookup Zone I have "New Zone" Not New Pointer (PTR)
Oh ok.  Then please create reverse zone first.  Its easy.  You just have to know your subnets.  This is in regards to nslookup error you got.
Can you post the screenshot of the ipconfig /all of the machine on which you have login problem.  Thanks.
I have added the zone file and now it does not show unknown but that has not solved the problem

Here is the ipconfig /all

C:\Users\ryangoncalves>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : PC16
   Primary Dns Suffix  . . . . . . . : domain.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : domain.local

Wireless LAN adapter Wi-Fi:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8723BE 802.11 bgn Wi-Fi Adapter
   Physical Address. . . . . . . . . : 74-DF-BF-98-D4-D7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 13:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter #3
   Physical Address. . . . . . . . . : 76-DF-BF-98-D4-D7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . : domain.local
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : EC-8E-B5-44-C4-D9
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::49ed:13f3:afcd:721f%13(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.16.55(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : October 18, 2016 9:17:24 PM
   Lease Expires . . . . . . . . . . : October 26, 2016 9:17:24 PM
   Default Gateway . . . . . . . . . : 192.168.16.1
   DHCP Server . . . . . . . . . . . : 192.168.16.6
   DHCPv6 IAID . . . . . . . . . . . : 60853501
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1E-FF-E3-D6-EC-8E-B5-44-C4-D9
   DNS Servers . . . . . . . . . . . : 192.168.16.6
   Primary WINS Server . . . . . . . : 192.168.16.6
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Bluetooth Network Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
   Physical Address. . . . . . . . . : 74-DF-BF-98-D4-D8
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Reusable ISATAP Interface {30595D76-F1BA-4394-83E6-B93A985937C5}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : domain.local
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
The name of this machine is PC16.  Hope it is different from all other machines.  Can you please try one thing.  Log onto this PC16 with local admin account.  Remove it from domain (i.e. put it on workgroup) and restart.  Once rebooted change the PC name.  Reboot again.  Once rebooted then finally add to the domain and let it reboot.  Test logins.  Update on the outcome.
@nitenKumar If you will read my above post I have already tried exactly as you outlined. Still did not work
Check if the user/s profile /account has been changed to microsoft account from a local profile.
What do you see at the start-up the user account or Microsoft account?
If so then the password may have been changed to reflect the Microsoft account
Find their Microsoft account password
for refs
How to Sign in Windows 10 with a Microsoft Account
http://www.isumsoft.com/it/how-to-sign-in-windows-10-with-a-microsoft-account/
You may have to log into the Microsoft account  from a web page and then change the password.
When you can't sign in to your Microsoft account
https://support.microsoft.com/en-au/help/12429/microsoft-account-sign-in-cant 
Recover your account
https://account.live.com/acsr 
Good Luck
It is setup to sign in to the local account and not a Microsoft account
ASKER CERTIFIED SOLUTION
Avatar of Gerhardpet
Gerhardpet
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Found the problem and fix on another source