Unable to log on to domain unless UPN is used

[lck092580]

I was doing some tests with my laptop (client) & desktop (win2k3 server).

I originally had the laptop join the domain and I was able to log on by selecting the domain and using my logon name: John.smith pass: pass#23word

However, after I tried deleting my laptop from the Computers container and re-adding it back on in AD users and computers, I could not log on with any account.

What I did next was to join a workgroup with my laptop, then rejoined the domain. I am able to logon as the domain's administrator but for some reason not with John.smith or any other user account.

Now what's weird is that i am able to logon if i went ahead and put john.smith@domain.com as my logon name.

Any ideas as to what is causing this? I'm interested in knowing what's going on. Thanks.

T

 

[Wishdiak]

lck092580,

Without more details, it sounds like your failed login attempts are not authenticating with the domain controller.

Is your laptop running Windows 2000 Professional or Windows XP Professional? Are you choosing the domain in the pull-down when you attempt to authenticate as a user?

Wishdiak

http://www.wishdiak.com

 

[lck092580]

Hi Wishdiak,

Yep, my laptop is running WinXP SP2.

Yep, I'm choosing the domain in the pull-down menu when I'm trying to authenticate.

I'd really like to know what I'm doing wrong since this seems like something that admins might frequently run into (deleting someone's workstation in the AD and then adding them back).

I think it has something to do with either the user's account or the computer account.

Thanks.

T

 

[lck092580]

This is exactly what I'm experiencing:

http://support.microsoft.com/default.aspx?scid=kb;en-us;234512

Yet, I did not rename the user. I just deleted the computer object from the Computers container.

Thanks.

 

[NickFerrar]

Haven't come across this before and we often delete/re-add computer accounts in our domain. When you removed the computer from the domain and put it a workgroup are you sure you didn't re-add it to the domain by just changing the workgroup name to the domain name (rather than specifying the domain to join in the actual domain option), not actually even sure if it would let you create a workgroup of the same name as an existing domain.

 

[lck092580]

I'm sure the joining and leaving domain is done correctly. I'm still very lost as to what's going on. I tried deleting the account and recreating it and it still has the same problem. I can only logon by extending the logon name with @contoso.com.

Any ideas?

 

[bluealhunter]

Is it me or this a strange place for this post?