Mobile workstation cannot see domain

[wannabie2]

I have two mobile workstations, one with Service pack 2 and the other with Service Pack 3.

I type in the IP address for the server domain in the service pack 2 laptop and I get a login screen asking for name and password. I supplied it and I'm able to access the files.
The other workstation with service pack 3, I'm having problems with. it doesn't see the domain.
I'm able to ping the server
I've forced the DNS by changing the host file
I've flushed and registered the DNS
I've assigned the workstation static IP address
I've added the workstation name to the domain controler and I still can't get it to look at the domain.

I've uninstalled servce pack 3 from the workstation and it still doesn't work. the service pack has changed something that it is not changing back.

does anyone know what's wrong or how to fix this so it will be like my other computer?

 

[Hondy]

a few thoughts

1. check any firewall settings are stopping the connection on the PC and the DC

2. check the DNS is set correctly on the failing PC, remove that host file entry and make sure it points to the DC in the IP settings

3. do "ping domain.name" and see if it resolves the DC correctly

 

[wannabie2]

Did all three

nothing in the firewall. I even disabled it
DNS is correct but it doesn't see it. I manually entered the dns settings on the host file to force it and it still wouldn't work

I ping the server and it sees it. I get replys. I just can't connect to it.
I get an error saying that I don't have permission to use the resources.

 

[Hondy]

hi mate

I didn't mean ping the server, i meant ping the domain. If you ping the domain it should resolve to the domain controller currently servicing your requests.

Is your problem that you cant JOIN the domain or that you CANT ACCESS RESOURCES on the the domain?

To me it sounds like you need to remove it from the domain and add it back in again as it sounds like its just not part of the domain if its on about permissions.

Does it help at all?

 

[wannabie2]

I pinged the domain .com and I got replies. it sees it and I can join the domain. the problem is since I'm working from a mobile workstation and I'm out of the office more, I don't want to join the domain but just access the resources.
when I try i get access permission errors.

It worked fine before then I installed the SP3 update for winxp. then I was not able to get to my files. anyone knows what might have happened?

 

[Hondy]

on the SP3 machine, when you try to logon do you get a logon prompt? I suspect not, in which case check that the server/domain Guest account is disabled - it maybe that SP3 has also altered the state of your local Guest account, compare this with your SP2 PC.

 

[wannabie2]

Thanks Hondy. sounds like you know what the problem is. I spent litterly three hours on the phone with Microsoft't tech support working on this.

They got back to me this morning and said that a security patch was responsible for problem and that there wasn't workaround for it for SP3.
unfortunately I uninstalled it and it still wouldn't work. what ever it changed it couldn't change back.

Do you have any suggestions what might have been changed so I can flip it back?

 

[Hondy]

i dont believe there is no work around, what you are doing is hardly uncommon.

If a security patch wrecked it then perhaps there is some kinda of vista-like change, you might find that a privilege is missing from a local account that used to be there.

have you tried a restore point rather than just uninstall?

my guess is that your guest account has been re-enabled locally and its trying to use that but getting rejected by the server because guest is useless.

compare the permissions in your local security policy in control panel>admin tools with your sp2 and sp3

and let me know

 

[Hondy]

What is your target domain, is it 2008?

I see in Windows XP SP3 there is a new feature called Network Access Protection (NAP)

"NAP is one of the most desired and highly anticipated features of Microsoft® Windows® Server 2008. NAP is a new platform and solution that controls access to network resources based on a client computer’s identity and compliance with corporate governance policy"

"The NAP platform is built into Windows Vista™, Windows Server 2008, and Windows® XP Service Pack 3."

Sounds like a likely culprit...

Does your eventvwr have anything useful in it or the security log on the server?

Could be a number of things if its directly related to the service pack. I dont supposed they told you which security patch did it?

 

[cmeagan656]

How are you trying to connect to the server domain? Via RDP? If so, see if anything in these two posts help:

RDP - Whats going on?
RDP no longer works--update torpedo??

Cheers.