Loggon problem with clients.

[Bchemist]

I have recently brought a new server online. Everything finally seems to be working when I am logged in at the server or from terminal services. However when I try to login from any client station (ie into the domain itself) I get an error message that entails:

No Domain server was available to validate your password. You may not be able to gain access to some network resources.

I can continue on, and term serv into my server, and I can connect the the server by the common name (ie. server_xyz)and access all files. But I am obviously not logged in, because none of the sercurity settings are taking affect.

Now a quick run down of what I can observe which I feel could be relavent.

1) win 2k server sp 3
2) No errors in Directory services or DNS event logs. Only error in logs at all is under applications which is an exchange originated error, but seems to be related

MSExchangeDSAcces EventID:2102 Process MAD.EXE (PID=2764). All Domain Controller Servers in use are not responding: server_xyz.domain.com )

3) dcdiag /v results: all pass
4) nltest results: all tests pass EXECPT /dcname:domain which results in:

NetGetDCName failed: Status = 2453 0x995 NERR_DCNotFound

5) nslookup resolves domain and server name and relies on server_xyz to resolve
6) all clients win98se, IP from DHCP and point to server_xyz for DHCP and DNS. all clients can ping server_xyz and domain successfully.
7) PDC, RID and infastructure under operations master all point to server_xyz, which is marked as a global catalog.


I think that is everything that I have noted for now, I have spent several days trying to get this issue resolved and searching through posts, none of which seem to be my problem. Any help would be appreciated.

 

[MSMVP]

Check WINS and it's functionality. NetGetDCName is a NetBIOS function to pull a 1B record (Master Browser record). NetGetAnyDcName is the function called when resolving a 1C record (used to find a DC for pass-through auth).

You've got Win98, which isn't exactly known for it's stellar IETF compliance, so WINS (or local broadcasts to the master and othr browsers) must be assisting.



Rick Kingslan MCSE, MCSA, MCT
Microsoft MVP - Active Directory
Associate Expert
Expert Zone -

http://www.microsoft.com/windowsxp/expertzone

 

[Bchemist]

I can't seem to find anything wrong with the WINS (then again I might not know what to look for). I say that it appears to be functioning however since it has records for the domain pointing to 1E, 1C, 1B, and 00 whose ip all point to the server_xyz's ip address also server_xyz has records in WINS for 6A, 87, 20, 03, 01, 00. These are the same records I have in my old server which can authenticate.

Is there anything else that I should look at?

 

[Breakerfall]

•does the computer name have a space? (ie "PC 1&quot?

•R/click Network Neighborhood >Properties >Client for Microsoft Networking >Properties >Uncheck the Log on to NT domain box.

•

http://support.microsoft.com/?kbid=152791

•

http://www.uwsp.edu/it/ras/faqs/nodmnsvr.htm

Breakerfall
®º°¨¨°º can you ping me now...GOOD! º°¨¨°º®

 

[Bchemist]

Breakerfall,

No, the computer doesn't have spaces. The clients are all uniformly named with a scheme of twoletters followed by instal date (i.e. IT020102) the server is called PE4600, and the domain is one word as well.

the links seem appropriate expect that all clients are running win98se which cliams to have rectified this issue, also the main issue their is with netbios, which appears to check out on the server. I ran netdiag /debug and everything passed, verified, and/or resolved.

without logging onto an NT domain I got nowhere on my system. So I re-instated that option (rebooting between each change of course) and still no change.

 

[Breakerfall]

is NetBIOS over TCP/IP installed?
Are the clients able to resolve NetBIOS names?


Breakerfall
®º°¨¨°º can you ping me now...GOOD! º°¨¨°º®

 

[Bchemist]

yes, netbios is installed on the server, and the clients seem to be able to resolve netbios names.

also should point out that the DCHP is coming from the same server that I am trying to log into, therefore the ip configuration host name is listing as belonging to the domain. But I can't access most things that I should be able, so I don't think I have successfully joined the domain.

 

[zoeythecat]

Bchemist,

Have you checked your DHCP Server to see if you may have left something out for Win9x clients?. Check the "DNS" tab. Make sure to have "Enable updates for DNS clients that do not support dynamick update" checked.

 

[Bchemist]

I did not have that checked, thanks for the pointer there. But it still didn't fix the problem.

 

[Bchemist]

Found the problem, RRAS was not enabled. Pretty simple once I realized, that I had it accidently disabled it. Thanks for all the help guys.

 

[zoeythecat]

Bchemist,

(1) Can you list here what you have for your Scope Options
for your DHCP. Make sure option 006 and 015 are
configured properly.
(2) Is the DHCP Server authorized?
(3) Recheck the DNS tab in DHCP and check your other settings. What settings do you have checked?
(4) Have you installed the DS Client(I think this is the name) for Windows98? This allows you to browse AD I believe. THis may not have anything to do with the problems you are having now but just a thought.
(5) Do you have a WINS Server active?
(6) Recheck the Windows98 clients, network properties. Check the "Client for MSNETWORKS" and make sure the domain is names correctly. Also check the "Identification" tab and make sure the workgroup field has the correct domain name.
(7) If above questions are checked correctly try entering an IP Address and DNS Name manually from the Windows98 TCP/IP properties.

 

[zoeythecat]

Ok.....Disregard all my pathetic questions then.....
:}

Good going on the RRAS find.

 

[Bchemist]

Thanks for all your effort though. It is really good to know that help like this is available. In a short period of time I was able to fix what I spent two days trying to figure out. Thanks again to everybody.