Problem Domain Log on Issue

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi guys,

I have one user who can not log on anywhere this morning; when he does, the message is

However, all the things on google say this is him trying to log on locally, which is not true. It is on every domain machine, his account is fine, in all the same groups we was on Friday.

So to confirm, a domain user, trying to logon with domain\username or user.name or username is unable to log onto the domain because of the above error, it is only this one user as well?

Any ideas gents?

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

what is the "logon to" dropdown set to? Have you tried to log onto a machine using another account immediately after he has attempted to? Do you get the same error?

 

Have a look at his account in AD. Maybe he's been set to log on interactively using a smart card

 

If none of the above methods work then: Recreate user account!

 

It's both Windows 7 Machines and Windows XP machines, obviously, 7 doesn't have a drop down. I will recreate the account and see what happens

 

Check if the correct logon server is being used. Type 'set' in the cmd line... If needs be - 'set logon server=server'

 

User profile could be corrupt

 

Just give it a backhander, then everything will be right as rain.

I wouldn't recreate the user just yet if you can avoid it. That just seems quite drastic. Besides, if it works (and it probably will), you haven't actually got to the root of the issue, you've just circumvented it. If you have the time, try to find the actual issue first. That way if/when it happens again you know where to look.

It wouldn't be an issue with the logon hours on the user account being set to prevent logon at that time would it? I've never used that feature, so have no idea what the message says in that scenario.

 

also check the Log On To option. Make sure the radio box is set to All computers. If its set to "The following computers" and theres nothing in the list that would have the same effect you are seeing I think.

 

Actually, try removing the network cable from a machine that the user has logged onto previously, because it will have cached credentials it should just log on. I would then reconnect the network cable and see what happens when you try to access network resources.

I would also check account expiry.

 

He's not got the 'Log on using Dial-Up connection' box ticked just under the log on to drop down menu has he?

Also, can other users from the same OU as his log on to this machine successfully? Can he log on to any machines from the same OU as his workstation?

Maria