Can't connect to the 2003 dc

I have 2003 domain controller which until yesterday all the computers on the
network were able to log on to the network. Today no one can authenticate
onto the network I can log onto the server remotely via terminal services and
at the terminal it self. I have restarted the server and the computers still
are not able to log onto the server. Any thoughts where I should start
trouble shooting? By the way there have not been any changes to the network
no adding of new software or reconfiguring of the server.
--
Mark Roshak

Hi,

What do Event logs say on domain controller? What do Event logs say on
client PCs? Specially Application and System logs.

Can clients ping the server by name?
How is DNS set up on the clients (what server clients use for DNS)?

--
Mike
Microsoft MVP - Windows Security


"roshak31" <(E-Mail Removed)> wrote in message
news:33AD0791-223F-42ED-A1F4-(E-Mail Removed)...
>I have 2003 domain controller which until yesterday all the computers on
>the
> network were able to log on to the network. Today no one can authenticate
> onto the network I can log onto the server remotely via terminal services
> and
> at the terminal it self. I have restarted the server and the computers
> still
> are not able to log onto the server. Any thoughts where I should start
> trouble shooting? By the way there have not been any changes to the
> network
> no adding of new software or reconfiguring of the server.
> --
> Mark Roshak

Miha Pihler [MVP] wrote:
> Hi,
>
> What do Event logs say on domain controller? What do Event logs say on
> client PCs? Specially Application and System logs.
>
> Can clients ping the server by name?
> How is DNS set up on the clients (what server clients use for DNS)?
>

And please tell us what is the error message that the clients receive
when trying to log on.

--
Pavlos Gerardos
MCP Windows XP, 2003 Server
pgerardos<AT>hotmail<DOT>com
Athens, Greece

Are the client's time-synced to the DC?

-Frank

"roshak31" <(E-Mail Removed)> wrote in message
news:33AD0791-223F-42ED-A1F4-(E-Mail Removed)...
>I have 2003 domain controller which until yesterday all the computers on
>the
> network were able to log on to the network. Today no one can authenticate
> onto the network I can log onto the server remotely via terminal services
> and
> at the terminal it self. I have restarted the server and the computers
> still
> are not able to log onto the server. Any thoughts where I should start
> trouble shooting? By the way there have not been any changes to the
> network
> no adding of new software or reconfiguring of the server.
> --
> Mark Roshak

The computers can log on locally but when they try to access network drive on
the server they get an error message of “F:\ is not accessible. The network
BIOS session limit was exceeded.�

The event viewer error message for the client is Event ID: 4

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/htserver1.domain.local. This indicates that the password used to encrypt
the Kerberos service ticket is different than that on the target server.
Commonly, this is due to identically named machine accounts in the target
realm (DOMAIN.LOCAL), and the client realm.

The last few error message in the system event log are print error messages.

The server is DNS and DHCP server for the network and I am able to ping the
server using the server name.

--
Mark Roshak


"P.Gerardos" wrote:

> Miha Pihler [MVP] wrote:
> > Hi,
> >
> > What do Event logs say on domain controller? What do Event logs say on
> > client PCs? Specially Application and System logs.
> >
> > Can clients ping the server by name?
> > How is DNS set up on the clients (what server clients use for DNS)?
> >
>
> And please tell us what is the error message that the clients receive
> when trying to log on.
>
> --
> Pavlos Gerardos
> MCP Windows XP, 2003 Server
> pgerardos<AT>hotmail<DOT>com
> Athens, Greece
>

On the last message where I said "The last few error messages in the system
event log are print error messages." that was on the domain controller.
--
Mark Roshak


"roshak31" wrote:

> The computers can log on locally but when they try to access network drive on
> the server they get an error message of “F:\ is not accessible. The network
> BIOS session limit was exceeded.�
>
> The event viewer error message for the client is Event ID: 4
>
> The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
> host/htserver1.domain.local. This indicates that the password used to encrypt
> the Kerberos service ticket is different than that on the target server.
> Commonly, this is due to identically named machine accounts in the target
> realm (DOMAIN.LOCAL), and the client realm.
>
> The last few error message in the system event log are print error messages.
>
> The server is DNS and DHCP server for the network and I am able to ping the
> server using the server name.
>
> --
> Mark Roshak
>
>
> "P.Gerardos" wrote:
>
> > Miha Pihler [MVP] wrote:
> > > Hi,
> > >
> > > What do Event logs say on domain controller? What do Event logs say on
> > > client PCs? Specially Application and System logs.
> > >
> > > Can clients ping the server by name?
> > > How is DNS set up on the clients (what server clients use for DNS)?
> > >
> >
> > And please tell us what is the error message that the clients receive
> > when trying to log on.
> >
> > --
> > Pavlos Gerardos
> > MCP Windows XP, 2003 Server
> > pgerardos<AT>hotmail<DOT>com
> > Athens, Greece
> >

How about on the clients? Any errors? Can clients ping the server by it's
name?

--
Mike
Microsoft MVP - Windows Security

"roshak31" <(E-Mail Removed)> wrote in message
news:C2DB45E5-A2BB-4B08-8168-(E-Mail Removed)...
> On the last message where I said "The last few error messages in the
> system
> event log are print error messages." that was on the domain controller.
> --
> Mark Roshak
>
>
> "roshak31" wrote:
>
>> The computers can log on locally but when they try to access network
>> drive on
>> the server they get an error message of "F:\ is not accessible. The
>> network
>> BIOS session limit was exceeded."
>>
>> The event viewer error message for the client is Event ID: 4
>>
>> The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
>> host/htserver1.domain.local. This indicates that the password used to
>> encrypt
>> the Kerberos service ticket is different than that on the target server.
>> Commonly, this is due to identically named machine accounts in the target
>> realm (DOMAIN.LOCAL), and the client realm.
>>
>> The last few error message in the system event log are print error
>> messages.
>>
>> The server is DNS and DHCP server for the network and I am able to ping
>> the
>> server using the server name.
>>
>> --
>> Mark Roshak
>>
>>
>> "P.Gerardos" wrote:
>>
>> > Miha Pihler [MVP] wrote:
>> > > Hi,
>> > >
>> > > What do Event logs say on domain controller? What do Event logs say
>> > > on
>> > > client PCs? Specially Application and System logs.
>> > >
>> > > Can clients ping the server by name?
>> > > How is DNS set up on the clients (what server clients use for DNS)?
>> > >
>> >
>> > And please tell us what is the error message that the clients receive
>> > when trying to log on.
>> >
>> > --
>> > Pavlos Gerardos
>> > MCP Windows XP, 2003 Server
>> > pgerardos<AT>hotmail<DOT>com
>> > Athens, Greece
>> >

Another question:

What operating system do your clients run? Windows 2000? Windows XP? What
service packs?

What service pack is on your domain controller?

--
Mike
Microsoft MVP - Windows Security

"roshak31" <(E-Mail Removed)> wrote in message
news:C2DB45E5-A2BB-4B08-8168-(E-Mail Removed)...
> On the last message where I said "The last few error messages in the
> system
> event log are print error messages." that was on the domain controller.
> --
> Mark Roshak
>
>
> "roshak31" wrote:
>
>> The computers can log on locally but when they try to access network
>> drive on
>> the server they get an error message of "F:\ is not accessible. The
>> network
>> BIOS session limit was exceeded."
>>
>> The event viewer error message for the client is Event ID: 4
>>
>> The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
>> host/htserver1.domain.local. This indicates that the password used to
>> encrypt
>> the Kerberos service ticket is different than that on the target server.
>> Commonly, this is due to identically named machine accounts in the target
>> realm (DOMAIN.LOCAL), and the client realm.
>>
>> The last few error message in the system event log are print error
>> messages.
>>
>> The server is DNS and DHCP server for the network and I am able to ping
>> the
>> server using the server name.
>>
>> --
>> Mark Roshak
>>
>>
>> "P.Gerardos" wrote:
>>
>> > Miha Pihler [MVP] wrote:
>> > > Hi,
>> > >
>> > > What do Event logs say on domain controller? What do Event logs say
>> > > on
>> > > client PCs? Specially Application and System logs.
>> > >
>> > > Can clients ping the server by name?
>> > > How is DNS set up on the clients (what server clients use for DNS)?
>> > >
>> >
>> > And please tell us what is the error message that the clients receive
>> > when trying to log on.
>> >
>> > --
>> > Pavlos Gerardos
>> > MCP Windows XP, 2003 Server
>> > pgerardos<AT>hotmail<DOT>com
>> > Athens, Greece
>> >

the following is the part from the client. and the clients can ping the
server by its name.

__________________________________________________ __________


The computers can log on locally but when they try to access network drive on
the server they get an error message of “F:\ is not accessible. The network
BIOS session limit was exceeded.�

The event viewer error message for the client is Event ID: 4

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/htserver1.domain.local. This indicates that the password used to encrypt
the Kerberos service ticket is different than that on the target server.
Commonly, this is due to identically named machine accounts in the target
realm (DOMAIN.LOCAL), and the client realm.

--
Mark Roshak


"Miha Pihler [MVP]" wrote:

> How about on the clients? Any errors? Can clients ping the server by it's
> name?
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "roshak31" <(E-Mail Removed)> wrote in message
> news:C2DB45E5-A2BB-4B08-8168-(E-Mail Removed)...
> > On the last message where I said "The last few error messages in the
> > system
> > event log are print error messages." that was on the domain controller.
> > --
> > Mark Roshak
> >
> >
> > "roshak31" wrote:
> >
> >> The computers can log on locally but when they try to access network
> >> drive on
> >> the server they get an error message of "F:\ is not accessible. The
> >> network
> >> BIOS session limit was exceeded."
> >>
> >> The event viewer error message for the client is Event ID: 4
> >>
> >> The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
> >> host/htserver1.domain.local. This indicates that the password used to
> >> encrypt
> >> the Kerberos service ticket is different than that on the target server.
> >> Commonly, this is due to identically named machine accounts in the target
> >> realm (DOMAIN.LOCAL), and the client realm.
> >>
> >> The last few error message in the system event log are print error
> >> messages.
> >>
> >> The server is DNS and DHCP server for the network and I am able to ping
> >> the
> >> server using the server name.
> >>
> >> --
> >> Mark Roshak
> >>
> >>
> >> "P.Gerardos" wrote:
> >>
> >> > Miha Pihler [MVP] wrote:
> >> > > Hi,
> >> > >
> >> > > What do Event logs say on domain controller? What do Event logs say
> >> > > on
> >> > > client PCs? Specially Application and System logs.
> >> > >
> >> > > Can clients ping the server by name?
> >> > > How is DNS set up on the clients (what server clients use for DNS)?
> >> > >
> >> >
> >> > And please tell us what is the error message that the clients receive
> >> > when trying to log on.
> >> >
> >> > --
> >> > Pavlos Gerardos
> >> > MCP Windows XP, 2003 Server
> >> > pgerardos<AT>hotmail<DOT>com
> >> > Athens, Greece
> >> >
>
>
>

total of 22 computers 17 have xp pro service pack 2. 5 computers have 2000
service pack 4 and the 2003 server is service pack 1
--
Mark Roshak


"Miha Pihler [MVP]" wrote:

> Another question:
>
> What operating system do your clients run? Windows 2000? Windows XP? What
> service packs?
>
> What service pack is on your domain controller?
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "roshak31" <(E-Mail Removed)> wrote in message
> news:C2DB45E5-A2BB-4B08-8168-(E-Mail Removed)...
> > On the last message where I said "The last few error messages in the
> > system
> > event log are print error messages." that was on the domain controller.
> > --
> > Mark Roshak
> >
> >
> > "roshak31" wrote:
> >
> >> The computers can log on locally but when they try to access network
> >> drive on
> >> the server they get an error message of "F:\ is not accessible. The
> >> network
> >> BIOS session limit was exceeded."
> >>
> >> The event viewer error message for the client is Event ID: 4
> >>
> >> The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
> >> host/htserver1.domain.local. This indicates that the password used to
> >> encrypt
> >> the Kerberos service ticket is different than that on the target server.
> >> Commonly, this is due to identically named machine accounts in the target
> >> realm (DOMAIN.LOCAL), and the client realm.
> >>
> >> The last few error message in the system event log are print error
> >> messages.
> >>
> >> The server is DNS and DHCP server for the network and I am able to ping
> >> the
> >> server using the server name.
> >>
> >> --
> >> Mark Roshak
> >>
> >>
> >> "P.Gerardos" wrote:
> >>
> >> > Miha Pihler [MVP] wrote:
> >> > > Hi,
> >> > >
> >> > > What do Event logs say on domain controller? What do Event logs say
> >> > > on
> >> > > client PCs? Specially Application and System logs.
> >> > >
> >> > > Can clients ping the server by name?
> >> > > How is DNS set up on the clients (what server clients use for DNS)?
> >> > >
> >> >
> >> > And please tell us what is the error message that the clients receive
> >> > when trying to log on.
> >> >
> >> > --
> >> > Pavlos Gerardos
> >> > MCP Windows XP, 2003 Server
> >> > pgerardos<AT>hotmail<DOT>com
> >> > Athens, Greece
> >> >
>
>
>