New Lenovo laptop joined to domain, but can't login as any user (only local Admin).

I can't ping the DC from the laptop

Via name or IP?

Disable Windows firewall for the Domain network and see if your issues go away.

Windows firewall is disabled for the domain already.

Ok now I can ping the laptop from the DC and I can ping the DC from the laptop, but I still can't login.  I didn't make any changes though which is odd.

I have loaded and joined 2 other laptops to the domain over the last couple days and logged in without issue, but they were older laptops, this one is brand new.

What DNS servers is the system getting from DHCP? Make sure that's correct.
What security solution is on the system? What happens if it is disabled and/or removed?

When I run ipconfig /all it sees both domain servers.  There is no security in place on the system yet, I have not deployed it at this time.

Disable Windows firewall for the Domain network and see if your issues go away.

Windows firewall is disabled for the domain already.

Select allOpen in new window

Please don't do that for anything other than testing

We are behind a well configured firewall.

Shaun's point was that once the testing is finished, WIndows Firewall should be turned back on. Leaving it off otherwise leaves the system open to risks, especially if either a bad system is on the internal network OR the system ends up on another network.

Is there a BIOS setting that can prevent this?

Not unless you did something like disable the network card.

Is there something different about that particular network port? Try from a different one.

You could resetting Winsock and TCP/IP if you wanted.

I assume that the laptop came preloaded with Windows 10 Pro (or Enterprise)? You could try reloading Windows entirely and get it back to factory. Then load your AV software on it, and run through the process again. (Not the first or preferred option, but something you can always fall back to)

We have a group policy on our servers to disable Windows firewall and our hardware firewall handles everything.  Not only that, we have things running through a proxy as well.  So disabling Windows firewall will always depend on your environment.

Can you login in locally to the laptop and from there run the following command:


netdom reset /d:yourdomain.com yourcomputername

It should say that it was successfully reset.  This is similar to an unjoin/join back to the DC.

Reboot your computer and see if you can login now.

the netdom command was unrecognized when I tried it.  But I did leave and rejoin the domain earlier and had same issue.

I am just going to reload Win10 with our Enterprise copy and see if that helps.  I will report back once it is complete and back on the domain.

Just a note, I did see on other forums where people had similar issues that were caused by the fingerprint sign on feature... but I did not configure that when I set the computer up out of the box and it was grayed out when I went into the settings.  Just wondering if that somehow contributed to this in one way or another.