| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 64393 | 2005-12-13 20:30:00 | domain admin login freezes - all others work | spdrcln (9420) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 412429 | 2005-12-13 20:30:00 | ok...this one has me stumped...every account in our domain and all local computer accounts work fine. When I try to log into a WindowsXP machine using the domain admin acount however it takes at least 15 minutes to log in. If the machine is not connected to the network then log in works just fine. If I log into a Win2000 machine or a server (2000 or 2003) it also works fine. Any domain admin other than THE domain admin can also log in without issue. Anyone have any idea what could cause this? Seems very weird to me. | spdrcln (9420) | ||
| 412430 | 2005-12-13 21:46:00 | Not sure what you mean by THE Domain Admin as "Domain Admin" is a security group and not a user account. Problem could stem from a number of things. What, if anything does the event logs show on the client and server? | berryb (99) | ||
| 412431 | 2005-12-13 22:01:00 | When you create a domain there is an account that is the domain admin, all other administrators are accounts added to the domain admin group, it is THE built in account for administering the domain. Nothing that I can find in the logs seems to indicate a problem. |
spdrcln (9420) | ||
| 412432 | 2005-12-13 22:11:00 | I take back the part about the logs...on second look there are no errors but it does create a massive amount of succees audits for "logon/logoff" and "priviledge use" for the administrator. They finally stop after the machine manages to log in (about 15 minutes) The logs seem to say that the account successfully logged in...then the next log says the user logged out and so on and so on. Yet, eventually, it opens up to the desktop...even though the LAST log says the the account logged out instead of in. This behavior is completely absent from any win2000 machine or any servers. |
spdrcln (9420) | ||
| 412433 | 2005-12-14 09:58:00 | So you are using the "administrator" account for the server . The "administrator" account is a member of the "Domain Admin Security Group" the same as any other account . But anyway back to your problem . The administrator account is often disabled or restricted for security reasons . If this is the case then you will need to check out the policy/s for anything that could be affecting the XP clients and not the 2000 clients . I don't know the answer but I would start by checking logs, Group policy, profiles etc . Delete the profile on clients . You might have a corrupt profile on the server if using roaming profiles . Why do you want to use this account anyway? I don't use it on a server let alone on clients . |
berryb (99) | ||
| 412434 | 2005-12-14 14:07:00 | Not using the Administrator account was one my suggestions when I began this job, however seeing as I'm not the boss all I get to do is make suggestions. As for why I need to figure it out....because my boss says to fix it. Can't think of a better reason. The profiles were deleted from all clients..no change, we don't do anything with GPOs and don't use romaing profiles. I can install XP on a brand new machine and as soon as it is made a member of the domain it begins experiencing this problem. The only logs that seem to show anything are the client security logs and all they show is the bizzare success log thing mentioned earlier. It has to be something that is different between XP and 2000...not to mention Server 2003. Makes no sense to me whatsoever. I might also mention that we have been running a mixed 2000 / XP network for some time. No major changes were made in the last while. Problem just appeared last week. |
spdrcln (9420) | ||
| 412435 | 2005-12-14 14:31:00 | No insult intended, but the question begs to be asked why you're in a job that you can't do. Anyway, maybe try www.security-forums.com where there are a lot more network specialist subscribers. (linked from www.windowsnetworking.com) |
Greg (193) | ||
| 412436 | 2005-12-14 14:54:00 | Excuse me? Is not the purpose of forums such as this to be able to access the knowledge and experience of other people who may have come accross the same problem? I have yet to meet anyone who knew everything... I am not sure how a person would NOT take offence to your post. | spdrcln (9420) | ||
| 412437 | 2005-12-14 21:00:00 | What service pack is installed on the XP pc/s? Does this (support.microsoft.com) sound like the prob you're having? |
Speedy Gonzales (78) | ||
| 412438 | 2005-12-14 21:50:00 | Hi Speedy, we have SP2 on all our XP machines - it is included in the installation CDs that we have. I just finished a fresh install on a new PC then joined it do the domain and then immediately logged on with the offending account and it experienced the exact same problem. I don't think it is related to the problem you linked to because we have the SP that was supposed to fix the problem and we don't use DFS. What do you think this account would do differently than any other domain admin? |
spdrcln (9420) | ||
| 1 2 | |||||