User on XP Home cannot logon to NT4 domain

[Designware]

Hi,

Thank you for taking the time to read this post!

I have a new Windows XP Home machine which I have successfully (I think) attached to a NT4 SP6 domain. Let's call the XP machine PC-1. I CAN logon to the domain as USER-A from PC-1. But I cannot logon to the domain as USER-B. It says that the logon and/or password is not found on the domain. However, when I go to another PC (PC-2), I can logon as User-A OR User-B.

One point of interest is that the computer PC-1 may have been ORIGINALLY named exactly the same user name as the logon on the domain. I changed that immediately when I came upon the problem. However, they did try to connect to the domain that way. So there may be some sort of naming issue with the computer name on the server vs. the user name of USER-B. How do I check on NT4 all of the existing computer names / accounts?

Also, any other ideas would be GREATLY appreciated. I am stumped.

Thanks.

Dale

 

[wolluf]

XP Home can't join a domain - by design (there is a workround posted on Tek Tips some while back).

However, if username/password logging onto XP Home machine match a domain username/password, you will have that doamin user's level of access to domain resources if you can see the network.

 

[Designware]

Thanks for the replay Wolluf.

I was mistaken ... I went back to the machine and it is an XP Pro machine. Sorry about that.

I have since found out that anyone who is an administrator can log onto the XP Pro machine, but anyone who does not have administrator rights cannot log onto the machine.

Per the Microsoft KB Article 314366 at

http://support.microsoft.com/default.aspx?scid=kb;en-us;314366

I enabled NETBIOS over TCP/IP ... with the same results.

I looked on the server manager, and the computer name is NOT the same as the logon name. computer is "PCName", and logon is "Name".

Any help will be greatly appreciated.

Dale

 

[wolluf]

Can you clarify the problem then.

1. Is the machine a member of the domain ('which I have successfully (I think) attached to a NT4 SP6 domain') - eg, when you log on, do you get a drop down list with the computer name & the domain name listed?

2. If it is, you are saying you can only log on with Administrative access. Are you logging on with a domain or local account (and is it doamin or local administrative access).

3. If you haven't connected to the domain - how did you try (there are 2 obvious methods available from system properties), and what happened if it didn't work.

 

[Designware]

Wolluf,

Thanks for your reply.

1. Is the machine a member of the domain ('which I have successfully (I think) attached to a NT4 SP6 domain') - eg, when you log on, do you get a drop down list with the computer name & the domain name listed?

*** YES, when I log on, I do get a drop down list with the computer name and the domain name listed.


2. If it is, you are saying you can only log on with Administrative access. Are you logging on with a domain or local account (and is it doamin or local administrative access).

*** I am logging on with a domain administrator account. That same logon does NOT have a local logon at all. However, the user account that I'm trying to get logged on DOES have a local logon that is the same name as the domain logon.


3. If you haven't connected to the domain - how did you try (there are 2 obvious methods available from system properties), and what happened if it didn't work.

*** Yes, I have tried to connect using the Network ID wizard as well as just changing the network properties. Both methods appear to join the domain just fine. When I go to the server, the PCName is listed as having an account (this is a new PC).

I really appreciate your help Wolluf!

Dale

 

[wolluf]

I think you may be a bit confused between local and domain logons. The domain administrator account doesn't have a local logon. If its actually called Administrator - there will also be a different local account called Administrator (to further confuse things, these 2 accounts can be given the same password - but one is authenticated on the server the other on the local machine). Both will have separate user profiles on the local machine after you've logged on there (in Documents and Settings). The local one will only log on when you select local machine from drop down box & domain one when you select domain.

The user account sounds like it is just a local user account (ie, the domain doesn't know about it - so it can't log onto domain). You need to set it up on the server in User manager for Domains (in Administrative Tools on start menu) before you can log on with it (you can also see all existing domain user names here).

hth

 

[Designware]

Wolluf,

No, the administrator account that I am referring to is an administrator account on the NT4 server. It has no corresponding local logon. That logon works great .... runs the logon script from the server ... and attaches to the domain.

The regular user (not a domain admin) has an account on the server ... and a matching on on the local PC. I can log on with that account locally, but CANNOT attach to the domain when the domain logon is selected from the drop down box.

Dale

 

[YouWelcome]

1. How do I check on NT4 all of the existing computer names / accounts?
USER MANAGER FOR DOMAINS creates and manages user accounts.

2. What happen when you try to log on the server. Which Error Message do you get?

3. Have you tried to delete the user account that you created on the server and create a new one using the same information.

Sometimes you need to delete the useraccount info from the DC and create a new one with a diffent name to make it work.

ALso can you authenticate/connect to the DC from Safe mode with networking.

 

[jasonboyes]

I hate to hijack a post but..
when you joined the machine to the domain did you add a user to use this machine after the machine joined the domain??

If so did what rights did you give it?

Jason

 

[wolluf]

Designware

'The regular user (not a domain admin) has an account on the server ... and a matching on on the local PC'. Do you mean there is a domain account (call it userac) and a local account also called userac?

What happens when you try to log onto the domain using this account (machine is already joined - you are just trying to log on, not join domain). Do you get an error message? I'm suspecting either there is not a domain account called usrac, or you're using the wrong password for it.

 

[Designware]

YouWelcome,

2. What happen when you try to log on the server. Which Error Message do you get?

*** It says that the user ID / password could not be found.

3. Have you tried to delete the user account that you created on the server and create a new one using the same information.

*** No I have not tried that. I will try it though. Interesting point is that she can log on with that userID / password from any other PC.


Jason,

You're not hijacking this post ... thank you for the response.

Your Question: when you joined the machine to the domain did you add a user to use this machine after the machine joined the domain??

YES I did ... it gives you the option of creating a local user account after I joined the domain ... I gave it administrator rights locally.

Thanks for your responses !!

Dale

 

[Designware]

Wolluf,

Thanks for your response.

'Do you mean there is a domain account (call it userac) and a local account also called userac?'

*** yes, that's correct

I do get an error message that ACCOUNT / password cannot be found.

However, this same person, with the same account / password logs on from other PCs to the same domain.

Thanks again.

Dale

 

[wolluf]

curiouser and curiouser!

You could try removing the local user account and its associated profile - though I can't see why this would make a difference - but then what you've described shouldn't be happening. Had some thoughts about policy restrictions - but I think you'd get a different message in that case.

Rather than remove the domain account, you could just try changing its password - then try it on the problem machine first.

 

[menny10]

Hi to all,
I still having the same problem, Designware,

It, happen the same way with me, suddenly, from one day to another, half staff of user of XP, can´t login the domain on nt 4,sp6, and the other half was working fine.

Today i remove and reistall, all the protocols of one xp pc, and remove the NAV, then can i login to the domain, and see all my maps,drivers.
but i hear in another forum,it is a problem with a patch for WNT 4.

Hope this help any.

 

[jasonboyes]

Have you tried removing the machine to from the domain, deleting the computer from the server manager and re adding the machine and the user you wish to have access to the machine?

Jason

 

[menny10]

yeah, jasonboyes

let me try, because, that thing weird, put me out again, from the server and can't see my driverson the network.



MNY

 

[Designware]

Welcome Menny10! Hope we find a cure to this problem.

Thanks for the replies Wolluf and Jason!

Wolluf:'You could try removing the local user account and its associated profile'

*** I tried removing the local user account, with the same result.

Wolluf:'Rather than remove the domain account, you could just try changing its password - then try it on the problem machine first.'

*** I will do this when I return the PC to its place Tuesday. (see below)

Jason: 'Have you tried removing the machine to from the domain, deleting the computer from the server manager and re adding the machine and the user you wish to have access to the machine?'

*** I will try this on Tuesday (see below) as well. (Though I have tried removing the machine from the server once already.)

I drug the XP PC to another building where we have a Win 2K domain. The XP PC joined and I could logon as any user I wanted to ... absolutely no problems.

I will return again to the original site on Tuesday and try your suggestions!

THANK YOU FOR YOUR REPLIES !! Hope this gets solved sometime soon!

Cheers, Dale

 

[menny10]

hi,
any of you resolve the problem,? i'm having the NT4, out of working well, some xp, clients can't see the any drive in the network.

any help.

 

[Designware]

Hi Everyone,

Well, I am finally functioning. I gave the user a completely new logon ID, and it worked the first time. When I brought the PC back, THAT user was that ONLY user that could not logon to the domain .... and it only failed using that ONE PC. She could logon anywhere else.

The only thing I can assume, is that NT4 "remembered" that ID as a PC name instead of a user name. Before I arrived, they named the PC exactly the same as the username and tried to join the domain. Even though I removed the PC name from NT4 Server using Server Manager, and renamed the original PC to something else, it appears the server "remembered" the original name.

Anyway, thank you for all your replies!! I really appreciate this forum.

Cheers,

Dale