Re: Group Policy Errors 1030 and 1058

From: Edward Meyer (EdwardMeyer_at_discussions.microsoft.com)
Date: 03/29/05

  • Next message: A Mackie: "Re: Authorization Manager (AzMan) and non-Windows users" 
    Date: Tue, 29 Mar 2005 06:49:13 -0800

    This is a Win 2003 Server.
    Here is a more detailed description of what exactly happened.
    We created another Domain Controller say called Domain2 setup a trust with
    Domain1 on Domain1 users were logging in as user@xyz.com and user@xyz.net,
    so we moved the upn suffiix xyz.com from Domain1 to Domain2, then we
    realized our mistake and tried to put it back, but of course we already knew
    that would not work, so know logging into Domain1 we get the 1058 error that
    this account is not allowed to login from this computer.
    we removed the trust but of course makes no different.
    the system is still operating i just can't make any changes .
    Thanks in advance

    "Edward Meyer" wrote:

    > No test was used for the DNS except the fact that they are right here and
    > have not been moved or changed in any way.
    > But you are right regarding the locally User Right in GPO.
    > i am logging on with the administrator account into the DC.
    >
    > "Roger Abell" wrote:
    >
    > > Sometimes DNS is supposed to have changed.
    > > How is it that you know it is alright? What test was used?
    > >
    > > Anyway, I doubt you issue is DNS.
    > >
    > > The setting is the Log on locally User Right in GPOs that have
    > > effect on that machine.
    > >
    > > You have not provided info as to what account you are using
    > > when seeing this. It sounds like you are logging into a DC with
    > > a Domain Admin account of the domain of that DC??
    > >
    > >
    > > --
    > > Roger Abell
    > > Microsoft MVP (Windows Security)
    > > MCSE (W2k3,W2k,Nt4) MCDBA
    > > "Edward Meyer" <EdwardMeyer@discussions.microsoft.com> wrote in message
    > > news:AF779703-9692-4C69-A667-02C00CE76905@microsoft.com...
    > > > I am having a problem with accessing GPO. the rror is: this account is not
    > > > authorized to logon from this station.
    > > > Now this all happened aftter a trust relation ship was setup with another
    > > > Domain and then the trust was removed.
    > > > so now logging on to the original domain controller i can logon but cannot
    > > > change anything.
    > > > any suggestions on how to reset this will be greatly appreciated.
    > > > and yes DNS an all that is fine and has not changed.
    > > > --
    > > > Edward
    > > > Mojave Valley
    > >
    > >
    > >

  • Next message: A Mackie: "Re: Authorization Manager (AzMan) and non-Windows users"

    Relevant Pages

    • Re: Trust Validation
      ... credentials and it says that cross policy is being applied to their account. ... trust again to see what happens. ... I assume you have dns secondary's of each others forests. ... I actually am getting the trust to validate now. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Trust problems
      ... Make sure the account you're logging on to is a member of the domain admins ... When I verify the Windows 2000 Domain I get the message that the Trust ...
      (microsoft.public.win2000.active_directory)
    • Re: Group Policy Errors 1030 and 1058
      ... i am logging on with the administrator account into the DC. ... I doubt you issue is DNS. ... >> Now this all happened aftter a trust relation ship was setup with another ...
      (microsoft.public.windows.server.security)
    • Re: AD design for two companies that need to share resources..
      ... Will a forest trust allow a person in company A to go to company B and log ... for you and the DNS config provides functioning DNS to ... But the opposite Domain has the ability to grant permissions (like Share & ... NTFS permissions) to your Account via the Trust. ...
      (microsoft.public.windows.server.active_directory)
    • RE: Domain Trust issue
      ... i`ve now tried in a virtual environment to create a trust. ... additional a user account witth same name on both domains. ... This domain only (not both this domain and the specified domain) ... DNS is configured with conditional dns and the dns resolution is not the ...
      (microsoft.public.windows.server.active_directory)