Active Directory Issue

[M]

Hello,
I have been having problems with my Windows 2000 server
running Active Directory. Recently, users have been
complaining about being unable to login to their
machines. The only resolution to this issue is to send
out a tech, have them login using the Domain Administrator
passowrd, logout, and then the user can login as normal.
Upon checking my Event Logger I have found that I am
running accross three error codes over and over 5722,
5723, and 5790. Each code tells me that I am either
missing a Domain Controller, a user, or a computer. I
have checked and double checked to ensure that each
computer and user that is afflicted with this problem is
in the AD, and they have all be rejoined. There also
seems to be nohting wrong with the server, as the majority
of my users can login as normal.

Thanks in advance

 

[Herb Martin]

It's usually DNS based.


--
DNS
1) Dynamic for the zone supporting AD
2) All internal DNS client NIC\IP properties must specify SOLELY
that internal, dynamic DNS server (set.)
3) DCs and even DNS servers are DNS clients too -- see #2

Restart NetLogon on any DC if you change any of the above that
affects a DC.

And All DNS servers replicated (from the Primary or from/among the
AD integrated DNS-DCs)

Run DCDiag on each and every DC -- save output to text file and
search for FAIL, ERROR, WARN.