Steve:
Wow! What a grocery list of stuff to check! Here's what I found:
Weird. Are those computers at SP2?
When I first started delving into this, I found that the Win2k Server was
still at SP2. It was upgraded to SP4 and all the trimmings about two days
ago.
The computers I'm trying to connect are all fully patched at SP4+.
Are there any entries in the logs as seen via Event Viewer that occur at startup/logon on those computers that may
help indicating any type of problem?
Here are all the Event Viewer messages from my most recent logon attempt:
USERENV = Windows cannot log you on because the profile cannot be loaded.
Contact your network administrator.
DETAIL - The process cannot access the file because it is being used by
another process.
===========
USERENV = Windows cannot copy file C:\Documents and Settings\Default
User\Templates\wordpfct.wpg to location C:\Documents and
Settings\Gr8_s1\Templates\wordpfct.wpg. Contact your network administrator.
DETAIL - The process cannot access the file because it is being used by
another process.
==========
WINLOGON = The NT Smartcard authentication certificate store could not be
updated. (0x80070057) The parameter is incorrect.
==========
WINLOGON = The enterprise root certificate store could not be updated.
(0x80070057) The parameter is incorrect.
==========
USERENV = Windows cannot determine the user or computer name. Return value
(1722).
==========
EVENT SYSTEM = The COM+ Event System failed to create an instance of the
subscriber {6295DF2D-35EE-11D1-8707-00C04FD93327}. CoCreateInstanceEx
returned HRESULT 8000401A.
==========
If the user is added to the local administrators group on one of those domain computers does the problem go
away?
The logon attempt gets the same "process cannot access the files because
...." message, but the logon is successful.
Does the problem happen if a domain administrator tries to logon to one of those computers which is not best practice but just for test
purposes?
The logon attempt gets the same "process cannot access the files because
...." message, but the logon is successful.
Are roaming profiles being used?
No.
If you logon as a local administrator and run the support tool netdiag on one of the computers are
any errors/warnings found?
I've removed all the "good" stuff and left in the possibly bad stuff:
Computer Name:
DNS Host Name:
System info :
Processor :
List of installed hotfixes :
Computer Name: GR-8-S-1
DNS Host Name: gr-8-s-1.SJS.local
System info : Windows 2000 Professional (Build 2195)
Processor : x86 Family 15 Model 4 Stepping 9, GenuineIntel
List of installed hotfixes :
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . :
IP Address . . . . . . . . :
Subnet Mask. . . . . . . . :
Default Gateway. . . . . . :
Primary WINS Server. . . . :
Dns Servers. . . . . . . . :
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8445D869-8BA6-43A1-99D3-D70CE8788D31}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the
name
' '. [RCODE_SERVER_FAILURE] <--- yet I can ping all DNS servers
successfully!
The name ' ' may not be registered in DNS.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8445D869-8BA6-43A1-99D3-D70CE8788D31}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8445D869-8BA6-43A1-99D3-D70CE8788D31}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Failed
' ': No DCs are up.
Trust relationship test. . . . . . : Passed
' ': No DCs are up (Cannot run test).
Secure channel for domain ' ' is to '\\ '.
Kerberos test. . . . . . . . . . . : Skipped
LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC ' '.
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully
Thank you for all your thoughtful and thorough list of things to check! Do
you see any 'smoking guns' that'll free me from this dilemma?
Henry
==================
http://www.microsoft.com/downloads/...76-9BB9-4126-9761-BA8011FABF38&displaylang=en