Re: Member server can't browse either Domain Controller
Zonky <zonky@my_pants.surfy.net> wrote in
news:Xns9A1F5FB08ECF2zonkysurfynet@194.177.96.26:
> I have a windows 2000 server which can't browse on to either domain
> controller.
>
> When i do gpresult i see the error LookupAccountSid failed with 1789.
> throughout the result.
>
> I've seen http://support.microsoft.com/kb/262958
> http://support.microsoft.com/kb/246108 and have checked:
>
> My DNS is set to the two domain controllers and i can use nslookup and
> it confirms i am using the domain controllers for dns.
>
> The computer config in gpo above is set correctly.
>
> Furthermore i can see inthe Eventlog:
> Windows cannot access the file gpt.ini for GPO The file must be
> present at the location <>. (). Group Policy processing aborted.
>
> It seems very much like this member server can't access either domain
> controller. It can talk to C$ share on other member servers /
> workstations when using valid domain credentials.
>
> Domain Controllers are 2003 SBS 32 bit and 2003 64bit R2.
>
> There are other physical and virtual 2000 member servers which work
> fine.
>
> If i connect to \\domaincontroller\C$ (or other share on the domain
> controllers), i get the username/password box popup. When i enter
> valid domain creditentials, they are not accepted and the
> username/password box reappears.
>
> Help!
>
> Z.
I'd like to clarify: No firewalls present, software or otherwise, and i
can ping the two servers with reply.
The netlogon service on the member server is working correctly..
I suspect it is some kind of authentication/encyption problem causing
failing of communication between the two, but i'm not really sure how to
troubleshoot further.
Z.
--
Please remove my_pants when replying by email.