cant log in as admin to domain

[wayne]

win2k AD domain. I have 2 workstations that I can not log
on to as administrative account. I can log in to the
doamin as the user that uses the pc but not as admin it
works fine on all other workstations.

When I try to login as admin to the domain from the 2
workstations I recive the following error " the system
cannot log you on now because the domain domainname is
not available"

some other things I have found in common with the 2
workstations are you can not browse the network
neighborhood but the mapped drives work fine. the 2
workstations do not show up in DNS nor do the
workstations resolve in DNS.

I have checked and rechecked the DNS setting for the 2
workstations and the settings are fine. I have not tried
to remove the workstations from the domain in fear they
will not rejoin the domain

 

[Tim Hines [MSFT]]

Based on the error this sounds like a DNS problem ( I know that you've
checked it). The clients may be having a problem locating the ldap records
in DNS. Verify that the clients are pointing to a dns server that has the
SRV records for the DCs. Verify that the DHCP client service is running on
the client because that service dynamically registers the clients host
record. That may explain why the records are not in DNS. The DNS zone must
be configured to allow dynamic updates for the registration to occur.

I assume that the users that use the workstation are able to logon because
they are probably logging on with cached credentials. If you have never
logged on that workstation with your admin account then you wont have cached
credentials to logon with. Have you checked the system event logs for
errors? Try running nltest.exe /dsgetdc to determine if DCs can be located.
It may also be useful to use netmon.exe to take a trace of the logon
traffic.
The following article explains how clients find domain controllers
http://support.microsoft.com/default.aspx?scid=kb;en-us;247811&Product=win2000

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.