Migrated user account NT4 ->W2K can't login after domain upgrade

[n88199]

Hi everybody!
I'm getting really frustated about this, the Microsoft guys says I have a Nortel problem and the Nortel guys says I have a microsoft problem.
..........................................................
Here is the problem.
After upgrading my NT4 domain to W2K my ISDN users which use W2K professional can no longer logon to the domain. If they use any other Windows OS there is no problem. The login attemt just hangs at "Loading your personal settings" and eventlog on the DC is 537 and complaines about KERBEROS.

Now the thing is that this error only shows when using an "old" account that existed before the migration. If I create a new account in AD and logon with that there is no problem.

If you use these accounts on a W2K professional connected directly to network there is no problem.

I did a normal upgrade of the PDC to keep all user and computer account intact during the upgrade.

I use Nortel Nautica ISDN routers and a Nortel radius server called Bay Secure Access control "BSAC"

I have been trying tons of stuff and also had diffrent so called expert consultants here, but no one has been able to solve the problem.

What could be wrong?

 

[sojournx]

I know this will seem pretty lame but I have to ask. Did you try a User Account reset?

:-]
Just a thought.

 

[felixfong]

ISDN users?? Is it mostly home machines?? Can they logon as a local admin??

If they do have admin rights, have them login as local administrator, rename their "user" profile. If they can login after that, problem lines in that profile folder. After that just have them copy their docs, desktop, pst, ost, etc. back. If this works, just write up a script to automate all the copying for you.

BTW, you can always create a temp domain admin account for them to login to complete this task.

 

[n88199]

How do you reset a user account?
Hope you don't mean resetting the password, i already tried that.

 

[Titleist]

Have you opened the necessary ports on the Nortel routers for passthrough kerberos authentication?