cant login to a domain

BERBENAS · 01-09-2009, 05:10 PM

(First of all the issue is happening on a lab enviroment so the production servers are not affected)
The idea is to migrate a win 2000 server based domain to a new server with windows 2003 R2 server.

First prepared the domain to be able to add a windows 2003 R2 server, added it succesfully and now is a DC but all the controll still is own by the win 2000 server machine, Active Directory replication succesfull, then NTDSUTIL from win 2003 R2 server so now the machine with 2003 R2 has the control of the domain (schema and the whole package) so far so good.

Then formated the windows 2000 server to windows XP PRO to try to log in as a normal user, but when i try to log in the message: "Las directivas locales de este sistema no le permiten iniciar una sesión interactiva" or "The local policy of this system does not permit you to logon
interactively" but when i log in on the same machine but with the Administrator account from the machine with win 2003 R2 i am able to do it.

The question here is: how can i make the win XP machine log in to the domain with a valid user?

few notes:
-Windows Server 2003 R2
-Windows XP SP2
-Connection between them with an ethernet hub
-only the 2 machines connected to it
-now windows server 2003 R2 machine is working as the DNS server of the domain

Thanks in advanced

**bilbus** · 01-11-2009, 04:50 AM

is the username you are loging in with a member of the domain users? Guessing the local admin and domain admin both work.

goto local security policy, and check who has the right to "logon
interactively"

Are you loging in localy, or rdp?

BERBENAS · 01-15-2009, 05:13 PM

Solved it, did two things and dont know which one solved it or if both did it but here it goes.
1st: the computer with win server 2000 which was the First DC and was formated to be an XP client was still on the Domain controller section of Active directory, (named it the same after formating) so i moved it to domain computers group. at this time the error changed to "cant find the domain server because is either blocked or not available" or somethin like that.
2nd: unppluged the network cable on the xp computer then initiated an Administrator session (computer administrator) plugged again the machine and took it out of the domain, restarted and same process started Administrator session without netwok cable, the plugged it and added the computer to the domain, restarted and everything is working now, i am able to log in with any valid user account on my Active directory that now is working on a windows server 2003 R2 domain, now is time for the production servers wish me luck.
Bilbus to answer your question yes both local and domain admin accounts worked at the time of your question, thanks sorry for the delay on the reply

01-09-2009, 05:10 PM	#1 (permalink)
BERBENAS Registered User Join Date: Jan 2009 Posts: 2 OS: WIN XP PRO SP3	cant login to a domain (First of all the issue is happening on a lab enviroment so the production servers are not affected) The idea is to migrate a win 2000 server based domain to a new server with windows 2003 R2 server. First prepared the domain to be able to add a windows 2003 R2 server, added it succesfully and now is a DC but all the controll still is own by the win 2000 server machine, Active Directory replication succesfull, then NTDSUTIL from win 2003 R2 server so now the machine with 2003 R2 has the control of the domain (schema and the whole package) so far so good. Then formated the windows 2000 server to windows XP PRO to try to log in as a normal user, but when i try to log in the message: "Las directivas locales de este sistema no le permiten iniciar una sesión interactiva" or "The local policy of this system does not permit you to logon interactively" but when i log in on the same machine but with the Administrator account from the machine with win 2003 R2 i am able to do it. The question here is: how can i make the win XP machine log in to the domain with a valid user? few notes: -Windows Server 2003 R2 -Windows XP SP2 -Connection between them with an ethernet hub -only the 2 machines connected to it -now windows server 2003 R2 machine is working as the DNS server of the domain Thanks in advanced

01-11-2009, 04:50 AM	#2 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 949 OS: OS2 Warp	Re: cant login to a domain is the username you are loging in with a member of the domain users? Guessing the local admin and domain admin both work. goto local security policy, and check who has the right to "logon interactively" Are you loging in localy, or rdp?

01-15-2009, 05:13 PM	#3 (permalink)
BERBENAS Registered User Join Date: Jan 2009 Posts: 2 OS: WIN XP PRO SP3	Re: cant login to a domain Solved it, did two things and dont know which one solved it or if both did it but here it goes. 1st: the computer with win server 2000 which was the First DC and was formated to be an XP client was still on the Domain controller section of Active directory, (named it the same after formating) so i moved it to domain computers group. at this time the error changed to "cant find the domain server because is either blocked or not available" or somethin like that. 2nd: unppluged the network cable on the xp computer then initiated an Administrator session (computer administrator) plugged again the machine and took it out of the domain, restarted and same process started Administrator session without netwok cable, the plugged it and added the computer to the domain, restarted and everything is working now, i am able to log in with any valid user account on my Active directory that now is working on a windows server 2003 R2 domain, now is time for the production servers wish me luck. Bilbus to answer your question yes both local and domain admin accounts worked at the time of your question, thanks sorry for the delay on the reply