Pulling hair out - and there ain't much left

  • Thread starter Thread starter Doug
  • Start date Start date
D

Doug

Thanks Matt & Rob for your responses but still no dice. The Reg keys for
current user are already blank and I have confirmed there is no existing
connection to the remote.

I feel the leading clue here is that this only happens on these three
machines. I can log onto any other workstation and use remote admin without
a hitch. Again, I can see the configurations of other machines I just cannot
do changes, primarily manipulate a users permissions or group membership.

Any other thoughts are most welcome.

Doug

--------

I Can't solve this !

I have three Dell Precision workstations that came pre-installed with W2k -
SP3. With only these three workstations, I cannot administer other computers
remotely. I can connect to other systems with Computer Administration and
can see everything but when I attempt changes I get the error message that -
"I am logged into a account that does not have access to 'computer name'. "
and am presented with a dialog for a logon.

I then attempt to logon with a known admin logon, (works fine on any other
system) and get - "Cannot display objects from this location because of the
following error: The credentials supplied conflict with an existing set of
credentials. "

It is only a problem on these three systems and since I have inherited one,
I have to fix this. I have installed SP4 and applied every MS patch
available. I have checked any system setting I can find to no avail. Drive
maps or lack of make no difference. Trying different logons including the
actual administrators account do not work.

Desperate for help,

Doug
 
Hmm. If this Dell computer is a domain member run netdiag [on install disk in
support/tools folder -run setup] on it to see if any failed tests/errors/warnings
show, particularly for dns, dclist, and domain membership/secure channel. Enable
auditing of logon events in Local Security Policy on your Dell and on one of the
workstations you are trying to mange and then look in the security log in Event
Viewer for anything that may provide a clue. Try connecting to the target computer
with IP address instead of computer name to see if that makes any difference. I don't
know if it will work but I would also try booting into safe mode with networking and
try it that way to see if it makes any difference by bypassing many startup
programs/services. --- Steve
 
Not sure of all the detail here but it sounds like you have a few possible
issues:
- administrative shares are disabled
- File and printer sharing is not installed or enabled
- remote services are not running or disabled on the target machines
- you have no local administrator rights (since you have not described your
network (peer2peer or domain), it would be difficult to help with this issue
- if the machines came pre-configured way back when and do not conform to
your other machines, why not just rebuild one of them the way you want and
then use that image to deploy the remaining two machines? It might be
quicker than trying to figure out how somebody customized the machines
before they were shipped. The conflicting credentials error suggests the
machines might not even have unique SID's, which could lead to even bigger
problems.

"Computer Administration??' sorry, unfamiliar term. How exactly are you
trying to remote control the machines?
 
Thanks for all the help, still not fixed but still trying a few things
listed here.

Serverguy, please advise what SID is.and how I would check this. The
computer administration I mention is actually 'Computer Management' under
administrative tools under control panel.

Worst case I can use another win2k cd to install the OS over again but it
bugs me to not discover what the problem is on just these three machines.

Absolutely no problem on any other machines. FYI, I am on a workgroup, not a
domain, static IP's (192.168.xxx.xxx), drive shares existing or not makes no
diff. The main thing that seems to prompt the problem is if I try to modify
a users account to add or remove group membership. I can actually manage
some other aspects of the remote system such as adding a drive share.

It's got me baffled.

thanks for all the input guys, any other ideas are still most welcome.

thanks,

Doug
 
SID is Security Identification. Every Windows 2K computer on the same
network should have unique SIDs. If a group of computers are all "cloned"
from the same image, you must run sysprep before taking the image so that
new SIDs are created on each machine. I'm not saying this wasn't done in
your case, just a possibility. Are you using an account that is in the
administrator's group on those machines? Remember to check both share
permissions and NTFS permissions.
Can you access the administrative shares remotely? ie: Start>>Run >>
\\<computername>\c$
 
I have tried several accounts, all of which are members of the
administrators group. I can connect to the admin shares (drive$) without a
problem. I can even create new shares using computer management on the
remote system.

I can actually create a new user account on the remote system, but when I go
to modify group membership for an existing or a new user I just created, I
get the conflict error.

I will likely wipe one of these systems out and reinstall the original image
CD soon to see if that works. If not, then I'll probably install a clean w2k
setup. It just bugs me to not being able to find the problem.

Thanks a bunch for the help.

Doug
 
Back
Top