Can't Login remotely

[anderson.deluiz]

Hi all,

We have a computer in an remote office in another city (City X)
connected by a private link. The computer has Windows XP Professional
SP2 and our domain controller is a Windows 2003 Standard, located on
city Y.

All TCP/IP services works fine on this computer, but we couldn't log on
our domain. If we login locally on this computer (Windows XP) and try
to map a network drive on our domain server, it asks for login/passwd
and works fine.

When we try to logon from the XP computer, it always give an error
telling to review login or password and if it is in caps.

How could we map a drive from local administrator account, using
ordinary users credentials and couldn't log on to the domain using the
same credentials ?

Thanks in advance and sorry for my english.

 

[Guest]

Couple of things. (Although it sounds like a replication issue)
Check that the user account isn't locked out. I have seen this before, where
a user cannot login to the domain via his PC yet can still map drives using
the same credentials. I think it could be a replication issue.

Or

Logging onto the domain via your PC requires that the 'Computer' has an
account on the network and a secure channel for this account is established
via NetLogon svc. Maybe the secure channel for the computer account has
screwed up.
Try locating the 'computer' in AD Users and Computers. Right click and
select 'reset account' from the drop down menu. This will reapply the Net
Logon password for the 'computer' and recreate the secure channel.
To check whether the secure channel is working for this PC you can run the
nltest /sc_query command.
nltest /servername:computername /sc_query:domainname is the correct command
I think.

Or

Simply remove the computer from the domain and re-join it to the domain or
run the following command.
netdom /reset <computername> /domain <domainname>/user0 <UserUPN>
/password0 *

Few things to try there.

Regds

 

[anderson.deluiz]

I've looked at user settings already and the account is not locked.
After I have removed the computer from the domain and rejoined it
succesfully, even remotely.

As you said, I reset the computer account with success and ran the
suggested commands.
Here is the output:

nltest /Server:CLIENT_MACHINE /sc_queryOMAIN
I_NetLogonControl failed: Status = 5 0x5 ERROR_ACCESS_DENIED

netdom reset CLIENT_MACHINE /DomainOMAIN
The Workstation does not have a trust secret.

Execution wasn't succesfull.
Does anyone have more tips ?

Thanks in advance.