Cannot logon Windows 2003 Server Domain

[DS]

I have a Windows 2000 Standard Server Domain setup as a root forest with AD
service.
My client is Windows XP professional. I cannot add this PC to the above
server using User Logon applet. The error is that the "account is not known
to Windows 2003 server". I went to the server and viewed the security log,
it said my XP client got in OK. I also attempted to log in via "Map to
Network drive" process. It prompts me a Logon dialog and it keeps doing so
until I clicked cancel.

This XP client can login to any other servers (NT Domain and Window 2000
AD). Also, all Windows 2000 Profess9ional clients can logon to my new
Windows 2003 domain.

All domain security policies allow "Everyone" to access them from the
Network and all clients are allowed to "add new computer" to the domain. I
even tried with Admin account and failed. All DNS and DHCP services from XP
clients are running OK. All clients can ping the domain server.

Thanks for your input.

Dan

[Robert Moir]

DS wrote:
> I have a Windows 2000 Standard Server Domain setup as a root forest
> with AD service.
> My client is Windows XP professional. I cannot add this PC to the
> above server using User Logon applet. The error is that the "account
> is not known to Windows 2003 server". I went to the server and viewed
> the security log, it said my XP client got in OK. I also attempted to
> log in via "Map to Network drive" process. It prompts me a Logon
> dialog and it keeps doing so until I clicked cancel.
>
> This XP client can login to any other servers (NT Domain and Window
> 2000 AD). Also, all Windows 2000 Profess9ional clients can logon to
> my new Windows 2003 domain.
>
> All domain security policies allow "Everyone" to access them from the
> Network and all clients are allowed to "add new computer" to the
> domain. I even tried with Admin account and failed. All DNS and DHCP
> services from XP clients are running OK. All clients can ping the
> domain server.

Can you find an account for the computer in AD? If so, can you remove it and
try registering the computer again?

[DS]

Robert,

Yes. Tried that for many times. I tried every whichway and still failed! New
account could not be added because it is not known to the domain.

Dan

"Robert Moir" > wrote in message
...
> Can you find an account for the computer in AD? If so, can you remove it
and
> try registering the computer again?
>

[Robert Moir]

DS wrote:
> Robert,
>
> Yes. Tried that for many times. I tried every whichway and still
> failed! New account could not be added because it is not known to the
> domain.

Does "every whichway" include creating a computer account object in active
directory and then trying to join the computer to the domain?

What events are recorded in the event log on the XP workstation?

[Roger Abell [MVP]]

Also, when joining have you prefixed the account used
for the joining process with the domain Netbios name.
domain\account
rather than just saying
account
??

--
Roger Abell
Microsoft MVP (Windows, Security)
MCDBA, MCSE Nt4+W2k
"DS" > wrote in message
...
> Robert,
>
> Yes. Tried that for many times. I tried every whichway and still failed!
New
> account could not be added because it is not known to the domain.
>
> Dan
>
> "Robert Moir" > wrote in message
> ...
> > Can you find an account for the computer in AD? If so, can you remove it
> and
> > try registering the computer again?
> >
>
>
>

[DS]

Yes. The computer was successfully added to the domain by the admin account.
I granted the user to add computer to the domain and also access the domain
from the net work under user's rights. My server can even ping the xp
client. No event generated. XP just prompted logon dialog without error. I
even tried with domain/logon ID and no go. All my W2k lients and windows 9x
logon OK. The weird thing about this is that event log is generated ass
successful login via "Map to network drive", but I cannot even logon to the
share drive. XP just keep prompting for Logon ID & PW.

I think I may have to rebuild the workstation. Something is really goofed in
this dell box...

Thanks for all your hints.

Dan

"Robert Moir" > wrote in message
...
> DS wrote:
> > Robert,
> >
> > Yes. Tried that for many times. I tried every whichway and still
> > failed! New account could not be added because it is not known to the
> > domain.
>
> Does "every whichway" include creating a computer account object in active
> directory and then trying to join the computer to the domain?
>
> What events are recorded in the event log on the XP workstation?
>
>

[DS]

Normally you donot need to. My other clients (w2k pro & win9x) could get in
OK without the domain prefix.
Thanks

Dan

"Roger Abell [MVP]" > wrote in message
...
> Also, when joining have you prefixed the account used
> for the joining process with the domain Netbios name.
> domain\account
> rather than just saying
> account
> ??
>
> --
> Roger Abell
> Microsoft MVP (Windows, Security)
> MCDBA, MCSE Nt4+W2k
> "DS" > wrote in message
> ...
> > Robert,
> >
> > Yes. Tried that for many times. I tried every whichway and still failed!
> New
> > account could not be added because it is not known to the domain.
> >
> > Dan
> >
> > "Robert Moir" > wrote in message
> > ...
> > > Can you find an account for the computer in AD? If so, can you remove
it
> > and
> > > try registering the computer again?
> > >
> >
> >
> >
>
>