Re: Domain workstation cannot see the domain for adding user permissio



It sounds like that computer has a DNS name resolution problem, connectivity
problem to a domain controller, or a problem with it's security account.
Verify that it is using only domain controllers as it's preferred and
alternate DNS servers in tcp/ip properties and as shown with ipconfig /all.
Check the logs with Event Viewer to see if any problems are found and run
the support tool netdiag on it to see if it reports any relevant problems.
To control what users can logon to a domain computer manage the user right
for logon locally to only include the authorized users/groups which can be
done in Local Security Policy under local policies-user rights. Be very
careful with the user right for deny logon locally as it overrides the logon
locally user right and that administrators are members of users and everyone
groups. --- Steve


"Red22" <Red22@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0BA79B82-46CD-4DFA-A1FA-1813511ADC26@xxxxxxxxxxxxxxxx
Everything (just about) works fine. This machine is a member of our only
domain and can access the domain shares. The full domain can be browsed
in
"My Network Places".

The problem is that this is the only machine on the network that cannot
see
the domain when you try to share a folder and go to:
Share Permissions > Add > Locations
Here, other machines see the local machine (and all created accounts on
it)
plus the domain server (and all accounts on that). But, this one only
sees
the local machine and NOT the domain.

Ultimately I would like to share files with a few, specific domain users,
which is why I need this.

If it helps, I think I broke this functionality myself because a few days
ago I was trying to remove domain users from being able to log on locally
to
this workstation. Which reminds me.. How would I do that? I want only a
few, specific domain users to be able to log on to the domain on this
specific machine. Is that possible? If so, how would I set that up?

Thanks!


.



Relevant Pages

  • Re: Why can I log in without domain controller?
    ... Otherwise company laptops and such would be pretty worthless w/o you having 2 user accounts (one on the local machine and one on the domain). ... I have configured a domain controller and added some computers and ... I logged in to the domain account before my server even beeing plugged. ...
    (microsoft.public.windows.server.general)
  • Re: Cannot logon to "(local machine)"
    ... You can only logon to the local computer with accounts ... you logon to the local computer you are authenticating with the local sam. ... > domain accounts locally (local machine). ... >> logon events in Domain Controller Security Policy to see if any logon ...
    (microsoft.public.win2000.group_policy)
  • Re: Domain unavailable for some logons
    ... You probably have a dns problem and the computer that you can not logon to ... with the domain account can not find the domain controller. ... > couple logon accounts for most of the 25 PC's. ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... accounts need to use complex passwords and minimum of ntlmv2 should be used for lan ... Services Client and configuring authentication level on Domain Controller Security ... controllers if you have all W2K/XP computers. ... I also recommend you enable auditing of account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... Domain Controller Security ... >controllers if you have all W2K/XP computers. ... >administrator accounts only when needed to, ... account logon and logon ...
    (microsoft.public.win2000.security)

Quantcast