Windows XP and Server 2000 ADS

[Thomas N]

Hello all,

Yesterday, I joined an XP Pro machine onto our company's
existing Windows 2000 AD network. The operation was
successful and all DNS/WINS/DHCP configurations tested
out successfully. Today morning, the user could not log
on because the XP Pro machine could not find the domain.
All hardware have been checked. When I try to log in with
my account, I is able too, even with the network cable
unplugged! I reconnected the cable and went to the 2000
AD DC, I was unable to ping the XP machine by name or by
ip address. All other machines can be pinged by the AD DC
as well. On the contrary, the XP machine is able to ping
all other machines on the network (with cat 5 plugged in
of course). All DNS and TCP/IP configurations have been
checked (DNS points to DC and WINS as well). Seems as if
the XP machine cannot contact the DC (or get replies
from) and is unable to authenticate usernames nor access
network resources.

Any hints or tips to point me in the right direction will
be greatly appreciated.

-Thomas

 

[allan grossman [mvp]]

Hi, Thomas -

If you can't ping the machine and there's no firewall
blocking ICMP traffic to that machine then something's
broke - but I guess you already knew that ;-)

XP Professional machines will perform a small number of
cached logins if they can't find a domain controller -
you found this out when you logged on to the domain with
the network cable unplugged, I guess.

First thing I'd check is whether the user inadvertently
enabled the Internet Connection Firewall on the machine,
Thomas. I've never tried to do that with a machine that
was a domain member but if it is possible it'd explain
just about everything - it's worth a look.

Good luck!

 

[Thomas N]

Hello again,
I've checked for the firewalls on the user's machine.
There are no third party firewall softwares installed.
Also, the LAN connection does not have firewall enabled.
I did find that the user has activated firewall on a dial-
up connection as well as Internet Connection Sharing (I
don't know why because this is a corporate network).
Could this in any way affect the pinging of the XP box
from the DC?

Thank you in advance. Thomas