Hi! 
ok, so i have a windows 2003 SBS, its a DC for a small internal network. the server handles DHCP, acts as a file server, and the other day it started acting up. users can logon to the domain, and can ping public addresses the internet, as well as browse the internet, but they cannot access any network drives, or VPN in, as they get a login prompt, and it will not accept their usernames/passwords, (although they just used the same username/password to login to the domain, and it was accepted.) and when they try to vpn in it kicks an error "logon failed:The user has not been granted the requested login type at this computer"
what ive tried so far,
added new user accounts and it still happened.
i have gone to the domain security policy, and i get a bunch of errors when i open it "the following entry in the [strings] section is too long and has been truncated" then when i get into the policy, i go to look at user right assignments, and "access this computer from the network" and its empty, no users, so i add the users, and go to save, but get another error "extended error, failed to save"
bummer,
another intresting point, when i go to view a users properties, i get an an error "could not load the dial in profile for this user because the network path was not found"
i ran the esentutl /g on the windows/security/database/secedit.sdb file, and it did not say it was corrupt.
im puzzled. please give any advise you may have.
ok, so i have a windows 2003 SBS, its a DC for a small internal network. the server handles DHCP, acts as a file server, and the other day it started acting up. users can logon to the domain, and can ping public addresses the internet, as well as browse the internet, but they cannot access any network drives, or VPN in, as they get a login prompt, and it will not accept their usernames/passwords, (although they just used the same username/password to login to the domain, and it was accepted.) and when they try to vpn in it kicks an error "logon failed:The user has not been granted the requested login type at this computer"
what ive tried so far,
added new user accounts and it still happened.
i have gone to the domain security policy, and i get a bunch of errors when i open it "the following entry in the [strings] section is too long and has been truncated" then when i get into the policy, i go to look at user right assignments, and "access this computer from the network" and its empty, no users, so i add the users, and go to save, but get another error "extended error, failed to save"
bummer,
another intresting point, when i go to view a users properties, i get an an error "could not load the dial in profile for this user because the network path was not found"
i ran the esentutl /g on the windows/security/database/secedit.sdb file, and it did not say it was corrupt.
im puzzled. please give any advise you may have.