Can't logon on Network

[Antoniov.]

My customer has a network with PCs running with Win XPP SP2 and one Windows 2003 server.
Until yesterday, all Pcs worked fine.
Today morning, one of these PC is unable to connect to domain. However user can connect with her user/password onto any other PC.
I can't use PC neither using administrator user/password.
On Win2003 server log I found error 5722 and microsoft doesn't help.
How can I solve it?

Thank a lot.
Antonio

[Ivan Ferreira]

You should logon as local administrator and check for any connectivity problems. Check the firewall settings in case was modified by the user. Check or reset the computer account in the domain. Check time sinchronization, DNS configuration. Run:

nltest /server:computername /trusted_domains

To verify if it's member of a domain.

[Chucka Eya]

Antonio,

when you say you can't log on as admin, do you mean on the network or locally on the computer?
you should be able to log on locally which would help in diagnosis.
can you ping this machine from any other pc?

let us know if you can log in locally using the admin account on the machine rather than the network admin - once you're inside, then you can troubleshoot.

[Robert S. Carr]

To add some additional suggestions:

Check if you can ping the DNS server from the workstation. DNS is critical for the way Active Directory works.

If you're getting a good ping and nothing else seems to work, try this:

1) In the Management Console on the server, find and delete the PC from Active Directory
2) On the PC, un-join the domain i.e. join a workgroup (just makup any name for your temp workgroup)
3) Reset the PC and login with a local account
4) Rejoin the domain (you will need a domain admin password)

See if this helps. I have had similar experiences in the past where this has fixed this same problem.

Good luck

Rob

[Antoniov.]

Hi to all,
thanks for informations.

Ivan,
the PC is not yet member of domain. Yesteday I changed PC configuration and join it in a workgroup; then I tried to join it on domain without success. There is no connectivity problem: I can open any mapped drive on server.

Chucka,
diagnostic can't help.

Robert,
I can ping DNS server that's the same domain controller.
I've already tried you check list, today PC is in workgroup. Read above.

Antonio

[Pieter 't Hart]

check time on workstation and server
net time \\
time
with w2k3/xp time-sync is crucial in authentication.
but then again some events related to authentication should be logged either on the server or the workstation.
are there multiple domaincontrollers ?
check eventlog on ALL DC's

do you use DHCP ?
check the adress supplied by dhcp to this workstation is registered in DNS.
do you have w9x clients ?
sometimes in a mixed wxp/w9x environment a dhcp-supplied adres to a w9x client is later reissued to a wxp client.
BUT for the w9x client the dhcp-server is the owner of this record and for the wxp client the client is the owner. So if this adres is reused by a different type client the dns-record cannot be overwritten!
from the dns-server try
- ping
- ping -a
if the -a version displays a different wsname then above situation applies.

[Antoniov.]

Today I discovered domain server is Win 2000 SBS and is not Win2003.
Sorry, but I'm not administrator of this network.
Problem is still open. Read here
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1015015

Thank you

Antonio