Access Denied - Joining Domain

I just rebuilt my Windows 2003 server from scratch, the machine is the only
server on the network and acts as the PDC.

My primary WindowsXP (SP2) box (which was not rebuilt) can still use the
server to authenticate logins (I also setup a new account/password to test
that this was not using cached info). When I try and access a shared folder
on the server I am prompted for login credentials - none of which work.

On my crach-n-burn WindowsXP (SP2) I removed the box from the domain and
then tried to rejoin, I consitently get a 'Access Denied' error although I
know that the Administrator user and password are correct. Interestingly if
I add the computer into AD on the server I am prompted if I wish to use that
name and am only denied access after saying Yes.

I kinow I have missed something obvious, could anybody point me in the right
direction?

Thanks,
Paul

Hi Pail,

If I understand you correctly, you reinstalled your domain, removed Windows
XP from old domain. Now when you successfully logon to your Windows XP and
try to add Windows XP to domain you get Access Denied error.

You can try this.

Make sure you have DNS setup correctly. Windows XP proffered DNS server
(under TCP/IP Settings) must point to your active directory server (I assume
where your active directory DNS is) -- simply enter AD server IP under
proffered DNS server.

When entering domain name to join, enter DNS name (e.g. domain.com not just
NetBIOS name DOMAIN). When prompted for username and password enter it like
this. Under username enter:

domain\administrator

Where domain is NetBIOS name of your domain and
where administrator is administrator account in your domain.

For password enter password assigned to administrator account.

What you could also try is some ordinary user account that you created in
your domain. Ordinary users do have permissions to add computers to domain
(10 by default).

Mike

"Paul Smith" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I just rebuilt my Windows 2003 server from scratch, the machine is the
only
> server on the network and acts as the PDC.
>
> My primary WindowsXP (SP2) box (which was not rebuilt) can still use the
> server to authenticate logins (I also setup a new account/password to test
> that this was not using cached info). When I try and access a shared
folder
> on the server I am prompted for login credentials - none of which work.
>
> On my crach-n-burn WindowsXP (SP2) I removed the box from the domain and
> then tried to rejoin, I consitently get a 'Access Denied' error although I
> know that the Administrator user and password are correct. Interestingly
if
> I add the computer into AD on the server I am prompted if I wish to use
that
> name and am only denied access after saying Yes.
>
> I kinow I have missed something obvious, could anybody point me in the
right
> direction?
>
> Thanks,
> Paul
>
>

Hi Mike,

DNS is setup correctly, and if the computer is already in AD then the dialog
recognises this. I have tried the user/password combinations described by
you with no success.

The firewalls on both the XP and Server are switched off.

Paul
"Miha Pihler" <mihap-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Pail,
>
> If I understand you correctly, you reinstalled your domain, removed
> Windows
> XP from old domain. Now when you successfully logon to your Windows XP and
> try to add Windows XP to domain you get Access Denied error.
>
> You can try this.
>
> Make sure you have DNS setup correctly. Windows XP proffered DNS server
> (under TCP/IP Settings) must point to your active directory server (I
> assume
> where your active directory DNS is) -- simply enter AD server IP under
> proffered DNS server.
>
> When entering domain name to join, enter DNS name (e.g. domain.com not
> just
> NetBIOS name DOMAIN). When prompted for username and password enter it
> like
> this. Under username enter:
>
> domain\administrator
>
> Where domain is NetBIOS name of your domain and
> where administrator is administrator account in your domain.
>
> For password enter password assigned to administrator account.
>
> What you could also try is some ordinary user account that you created in
> your domain. Ordinary users do have permissions to add computers to domain
> (10 by default).
>
> Mike
>
> "Paul Smith" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> I just rebuilt my Windows 2003 server from scratch, the machine is the
> only
>> server on the network and acts as the PDC.
>>
>> My primary WindowsXP (SP2) box (which was not rebuilt) can still use the
>> server to authenticate logins (I also setup a new account/password to
>> test
>> that this was not using cached info). When I try and access a shared
> folder
>> on the server I am prompted for login credentials - none of which work.
>>
>> On my crach-n-burn WindowsXP (SP2) I removed the box from the domain and
>> then tried to rejoin, I consitently get a 'Access Denied' error although
>> I
>> know that the Administrator user and password are correct. Interestingly
> if
>> I add the computer into AD on the server I am prompted if I wish to use
> that
>> name and am only denied access after saying Yes.
>>
>> I kinow I have missed something obvious, could anybody point me in the
> right
>> direction?
>>
>> Thanks,
>> Paul
>>
>>
>
>

Paul,

Can you check event logs on your Windows XP and your domain controller for
any errors and post back with details.

You should also remove your Windows XP from domain (before you do this make
sure that you know local administrator password on this computer or you will
not be able to log in back. Delete computer account in active directory for
this Windows XP computer (it should be under Computers container). Once you
have done this, try to add your Windows XP back to domain.

Mike

"Paul Smith" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Mike,
>
> DNS is setup correctly, and if the computer is already in AD then the
dialog
> recognises this. I have tried the user/password combinations described by
> you with no success.
>
> The firewalls on both the XP and Server are switched off.
>
> Paul
> "Miha Pihler" <mihap-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Hi Pail,
> >
> > If I understand you correctly, you reinstalled your domain, removed
> > Windows
> > XP from old domain. Now when you successfully logon to your Windows XP
and
> > try to add Windows XP to domain you get Access Denied error.
> >
> > You can try this.
> >
> > Make sure you have DNS setup correctly. Windows XP proffered DNS server
> > (under TCP/IP Settings) must point to your active directory server (I
> > assume
> > where your active directory DNS is) -- simply enter AD server IP under
> > proffered DNS server.
> >
> > When entering domain name to join, enter DNS name (e.g. domain.com not
> > just
> > NetBIOS name DOMAIN). When prompted for username and password enter it
> > like
> > this. Under username enter:
> >
> > domain\administrator
> >
> > Where domain is NetBIOS name of your domain and
> > where administrator is administrator account in your domain.
> >
> > For password enter password assigned to administrator account.
> >
> > What you could also try is some ordinary user account that you created
in
> > your domain. Ordinary users do have permissions to add computers to
domain
> > (10 by default).
> >
> > Mike
> >
> > "Paul Smith" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> >> I just rebuilt my Windows 2003 server from scratch, the machine is the
> > only
> >> server on the network and acts as the PDC.
> >>
> >> My primary WindowsXP (SP2) box (which was not rebuilt) can still use
the
> >> server to authenticate logins (I also setup a new account/password to
> >> test
> >> that this was not using cached info). When I try and access a shared
> > folder
> >> on the server I am prompted for login credentials - none of which work.
> >>
> >> On my crach-n-burn WindowsXP (SP2) I removed the box from the domain
and
> >> then tried to rejoin, I consitently get a 'Access Denied' error
although
> >> I
> >> know that the Administrator user and password are correct.
Interestingly
> > if
> >> I add the computer into AD on the server I am prompted if I wish to use
> > that
> >> name and am only denied access after saying Yes.
> >>
> >> I kinow I have missed something obvious, could anybody point me in the
> > right
> >> direction?
> >>
> >> Thanks,
> >> Paul
> >>
> >>
> >
> >
>
>