Userenv 1000. Windows cannot determine the user or computer name. Return value (<return error code>)

[Ingmar]

Hi all,

Since one week we experience some problems on one of our Win2k domains. When
adding a machine to AD a reboot is required. After that, the client cannot
contact the domain controller anymore. It is possible to ping the server but
it's not possible to browse over UNC. The following events are logged
repeatedly in System and Application log:

Userenv 1000
Error
Windows cannot determine the user or computer name. Return value 1908

Userenv 1000
Error
Windows cannot determine the user or computer name. Return value 1722

Userenv 1000
Error
Windows cannot determine the user or computer name. Return value 1355

MrxSmb 3034
The redirector was unable to initialize security context or query context
attributes

Browser 8021, Netlogon 5719 and W32Time 54 are also logged.

At first this looked like a corrupt machine account in AD so we added it
again to AD. We also gave it another name. Unfortunately this did not solve
the problem so we checked the DNS configuration, the existence of the srv
records in DNS and the ability to allow dynamic updates. The new client
registers itself in DNS. Since machine accounts are in the "Everyone" and
"Authenticated Users" groups we checked if these groups still were listed in
the "Access this computer from the network" policy setting.
When running GPresult we get some "LookupAccountSid failed with 1789"
errors.

Somehow we can connect fine from all the other machines, but every new
machine we try to connect has the above problems.

Does anybody know what to do about this problem?

Any help is appreciated,

thanx in advance,

Ingmar

 

[Marina Roos]

Hi Ingmar,

How many nics in the server?
Does DNS on those nics point to your server-IP only?
Is the client set to obtain an IP and DNS automatically from your
DHCP-server?
Can you post the ipconfig/all from a client?

Marina