Hi,

I have a problem that perhaps someone could help me with.

We run two domain controllers with 2000 server on and 200 xp pro
clients. The main domain controller houses the printers and the home shares
for users documents and a second domain controller which houses
networked software. Basically users can log onto the domain (im assuming via
the active directory on the second server which will have kicked in to
replace the main one). However they cannot access printers and home
shares because the main DC isnt allowing users to authenticate themselves on
it.

As administrator i can log into the clients and the second DC i cant
log onto the main DC though, it says my user account is disabled, the
same applies for any other user account. I looked in users and computers
on the second DC and all accounts appear fine and none are disabled.

The only thing we can think of that may be connected is that 3 new
laptops arrived the same morning and someone connected them to the network,
the computer name of these laptops was elonex which is the same name as
the DC that i cannot get onto.


Kind regards

Phil Sigley

phil sigley wrote:
> Hi,
>
> I have a problem that perhaps someone could help me with.
>
> We run two domain controllers with 2000 server on and 200 xp pro
> clients. The main domain controller houses the printers and the home
> shares for users documents and a second domain controller which houses
> networked software. Basically users can log onto the domain (im
> assuming via the active directory on the second server which will
> have kicked in to replace the main one). However they cannot access
> printers and home shares because the main DC isnt allowing users to
> authenticate themselves on it.
>
> As administrator i can log into the clients and the second DC i cant
> log onto the main DC though, it says my user account is disabled, the
> same applies for any other user account. I looked in users and
> computers on the second DC and all accounts appear fine and none are
> disabled.
>
> The only thing we can think of that may be connected is that 3 new
> laptops arrived the same morning and someone connected them to the
> network, the computer name of these laptops was elonex which is the
> same name as the DC that i cannot get onto.

Remove the computer accounts from the domain in ADUC. You can't have
multiple machines with the same name on a network.
>
>
> Kind regards
>
> Phil Sigley

"Lanwench [MVP - Exchange]" <(E-Mail Removed)> wrote in message news:<(E-Mail Removed)>...
> phil sigley wrote:
> > Hi,
> >
> > I have a problem that perhaps someone could help me with.
> >
> > We run two domain controllers with 2000 server on and 200 xp pro
> > clients. The main domain controller houses the printers and the home
> > shares for users documents and a second domain controller which houses
> > networked software. Basically users can log onto the domain (im
> > assuming via the active directory on the second server which will
> > have kicked in to replace the main one). However they cannot access
> > printers and home shares because the main DC isnt allowing users to
> > authenticate themselves on it.
> >
> > As administrator i can log into the clients and the second DC i cant
> > log onto the main DC though, it says my user account is disabled, the
> > same applies for any other user account. I looked in users and
> > computers on the second DC and all accounts appear fine and none are
> > disabled.
> >
> > The only thing we can think of that may be connected is that 3 new
> > laptops arrived the same morning and someone connected them to the
> > network, the computer name of these laptops was elonex which is the
> > same name as the DC that i cannot get onto.
>
> Remove the computer accounts from the domain in ADUC. You can't have
> multiple machines with the same name on a network.
> >
> >
> > Kind regards
> >
> > Phil Sigley

I have done this, the laptops have been removed from the domain and
given unique names. Still the problem persists.

phil sigley wrote:
> "Lanwench [MVP - Exchange]"
> <(E-Mail Removed)> wrote in
> message news:<(E-Mail Removed)>...
>> phil sigley wrote:
>>> Hi,
>>>
>>> I have a problem that perhaps someone could help me with.
>>>
>>> We run two domain controllers with 2000 server on and 200 xp pro
>>> clients. The main domain controller houses the printers and the home
>>> shares for users documents and a second domain controller which
>>> houses networked software. Basically users can log onto the domain
>>> (im assuming via the active directory on the second server which
>>> will have kicked in to replace the main one). However they cannot
>>> access printers and home shares because the main DC isnt allowing
>>> users to authenticate themselves on it.
>>>
>>> As administrator i can log into the clients and the second DC i cant
>>> log onto the main DC though, it says my user account is disabled,
>>> the same applies for any other user account. I looked in users and
>>> computers on the second DC and all accounts appear fine and none are
>>> disabled.
>>>
>>> The only thing we can think of that may be connected is that 3 new
>>> laptops arrived the same morning and someone connected them to the
>>> network, the computer name of these laptops was elonex which is the
>>> same name as the DC that i cannot get onto.
>>
>> Remove the computer accounts from the domain in ADUC. You can't have
>> multiple machines with the same name on a network.
>>>
>>>
>>> Kind regards
>>>
>>> Phil Sigley
>
> I have done this, the laptops have been removed from the domain and
> given unique names. Still the problem persists.

Did you check your DNS (& WINS if you use it) to see if there are still any
funky entries?
Check the event logs on server/workstation?