Problems on our AD discovered using NETDIAG

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

I noticed that most of the computers in our domain keep getting

No Domain Controller is available for domain IPCCK due to the following:
There are currently no logon servers available to service the logon request.
..
Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.

every time they reboot.
The exception are computers used by domain administrators like me
which do not show these events in event log. NetDiag on affected machines
shows following:

DC list test . . . . . . . . . . . : Failed
You don't have access to DsBind to gauss (192.168.0.10).
[ERROR_ACCESS_DENIED]
List of DCs in Domain 'IPCCK':
gauss.ipcck.hr
tezej.ipcck.hr

and then

Kerberos test. . . . . . . . . . . : Failed
[FATAL] Cannot get ticket cache from Kerberos.
The error occurred was: (null)

Everything else is OK.
So this must be a permission issue. How can I fix this to prevent getting
errors
every time machines reboot?

Thank you,
Drazen

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Drazen <Drazen@discussions.microsoft.com> wrote:
> I noticed that most of the computers in our domain keep getting
>
> No Domain Controller is available for domain IPCCK due to the
> following: There are currently no logon servers available to service
> the logon request. .
> Make sure that the computer is connected to the network and try
> again. If the problem persists, please contact your domain
> administrator.
>
> every time they reboot.
> The exception are computers used by domain administrators like me
> which do not show these events in event log. NetDiag on affected
> machines shows following:
>
> DC list test . . . . . . . . . . . : Failed
> You don't have access to DsBind to gauss (192.168.0.10).
> [ERROR_ACCESS_DENIED]
> List of DCs in Domain 'IPCCK':
> gauss.ipcck.hr
> tezej.ipcck.hr
>
> and then
>
> Kerberos test. . . . . . . . . . . : Failed
> [FATAL] Cannot get ticket cache from Kerberos.
> The error occurred was: (null)
>
> Everything else is OK.
> So this must be a permission issue. How can I fix this to prevent
> getting errors
> every time machines reboot?

Usually these errors are present if you are logged on to a computer with a
local account instead of a domain account.
Look at the Netdiag output in the domain membership test to see if you are
logged in with a local account or a domain account.



--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================