Server 2008 DC Access Problem

I have posted this about two months ago but still haven't been able to fix
the problem. Here we go first with the setup:
Originally we had one server which acted as a DC/AD and also as a Web
Application Server where people had to access from outside. Then we
installed a new server (2008) and made this as the DC, AD, DHCP, DNS and I
demoted the old server from a DC/AD and joined it to the Domain together with
all the PC's. No Problem at all to join them all.

The problem started when I wanted to map the Drives. I went to Network -
Entire Network - Microsoft Network and there I see the Domain ADCPK. When I
click on it with all logins even Administrator I am getting an Error You not
have permission to access this....... However, if I go to run and type the
servers IP address I can access the server no problem and map it. I ping the
servers IP no problem and weired enough I also can ping the servers name. But
for some reason the Domain doesn't accept any user. Somehow I got stuck with
no permission on the Domain ADCK.

On the DC/DNS itself it shows that the DNS is running and all the PC's are
shown with their names.

ipconfig /all for Server:
192.168.0.1
255.255.255.0
192.168.0.3
DNS: 192.168.0.1

ipconfig /all for PC's
192.168.0.51 - 254
255.255.255.0
192.168.0.3
DNS: 192.168.0.1

I also cannot share any files as the Domain blocks me and I cannot see any
other PC's

I have disabled all Firewalls, AntiVirus (ESed) and who the hell know what
else.

Just seems that the Domain is blocking all users, however, no problem to
join but after that, that's it.

I am really really frustrated and hope that someone out there can give me
some clues. Thanks in advance

Hello Somchai,

Are you able to logon on a client machine to the domain with a domain user
acocunt? If you run "echo %logonserver%" wihtout the quotes on the client,
which machine is listed as logonserver, client computer or server?

Additional post the AD doain name shown in AD UC, the domain name listed
in DNS zones and the NetBios name.

Unfortunal the ipconfig /all is not original, so are the server/clients enabled
for NetBios over TCP/IP? Does the server has a second NIC in use?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have posted this about two months ago but still haven't been able to
> fix
> the problem. Here we go first with the setup:
> Originally we had one server which acted as a DC/AD and also as a Web
> Application Server where people had to access from outside. Then we
> installed a new server (2008) and made this as the DC, AD, DHCP, DNS
> and I
> demoted the old server from a DC/AD and joined it to the Domain
> together with
> all the PC's. No Problem at all to join them all.
> The problem started when I wanted to map the Drives. I went to
> Network - Entire Network - Microsoft Network and there I see the
> Domain ADCPK. When I click on it with all logins even Administrator I
> am getting an Error You not have permission to access this.......
> However, if I go to run and type the servers IP address I can access
> the server no problem and map it. I ping the servers IP no problem
> and weired enough I also can ping the servers name. But for some
> reason the Domain doesn't accept any user. Somehow I got stuck with no
> permission on the Domain ADCK.
>
> On the DC/DNS itself it shows that the DNS is running and all the PC's
> are shown with their names.
>
> ipconfig /all for Server:
> 192.168.0.1
> 255.255.255.0
> 192.168.0.3
> DNS: 192.168.0.1
> ipconfig /all for PC's
> 192.168.0.51 - 254
> 255.255.255.0
> 192.168.0.3
> DNS: 192.168.0.1
> I also cannot share any files as the Domain blocks me and I cannot see
> any other PC's
>
> I have disabled all Firewalls, AntiVirus (ESed) and who the hell know
> what else.
>
> Just seems that the Domain is blocking all users, however, no problem
> to join but after that, that's it.
>
> I am really really frustrated and hope that someone out there can give
> me some clues. Thanks in advance
>

Dear Meinolf, thank you for your reply. Please find below %logonserver% and
ipconfig from Server ILS-DC and one PC.

Also the DNS on ILS-DC is ILSPK.LOCAL and in the AD Users and Computers it
is ILSPK.LOCAL

C:\Documents and Settings\mgr3>echo %logonserver%
\\ILS-DC

C:\Documents and Settings\mgr3>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : aemgr
Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ILSPK.LOCAL

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Atheros L1 Gigabit Ethernet
10/100/1
000Base-T Controller
Physical Address. . . . . . . . . : 00-1D-60-AE-4C-5E
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.59
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.3
DNS Servers . . . . . . . . . . . : 192.168.0.1


C:\Users\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : ILS-DC
Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ILSPK.LOCAL

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
Server A
apter
Physical Address. . . . . . . . . : 00-23-7D-32-F5-9E
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.3
DNS Servers . . . . . . . . . . . : 192.168.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
isatap.{9850C111-1184-4964-BE40-D4D0FCEF
D4C}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 9:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes


"Meinolf Weber [MVP-DS]" wrote:

> Hello Somchai,
>
> Are you able to logon on a client machine to the domain with a domain user
> acocunt? If you run "echo %logonserver%" wihtout the quotes on the client,
> which machine is listed as logonserver, client computer or server?
>
> Additional post the AD doain name shown in AD UC, the domain name listed
> in DNS zones and the NetBios name.
>
> Unfortunal the ipconfig /all is not original, so are the server/clients enabled
> for NetBios over TCP/IP? Does the server has a second NIC in use?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > I have posted this about two months ago but still haven't been able to
> > fix
> > the problem. Here we go first with the setup:
> > Originally we had one server which acted as a DC/AD and also as a Web
> > Application Server where people had to access from outside. Then we
> > installed a new server (2008) and made this as the DC, AD, DHCP, DNS
> > and I
> > demoted the old server from a DC/AD and joined it to the Domain
> > together with
> > all the PC's. No Problem at all to join them all.
> > The problem started when I wanted to map the Drives. I went to
> > Network - Entire Network - Microsoft Network and there I see the
> > Domain ADCPK. When I click on it with all logins even Administrator I
> > am getting an Error You not have permission to access this.......
> > However, if I go to run and type the servers IP address I can access
> > the server no problem and map it. I ping the servers IP no problem
> > and weired enough I also can ping the servers name. But for some
> > reason the Domain doesn't accept any user. Somehow I got stuck with no
> > permission on the Domain ADCK.
> >
> > On the DC/DNS itself it shows that the DNS is running and all the PC's
> > are shown with their names.
> >
> > ipconfig /all for Server:
> > 192.168.0.1
> > 255.255.255.0
> > 192.168.0.3
> > DNS: 192.168.0.1
> > ipconfig /all for PC's
> > 192.168.0.51 - 254
> > 255.255.255.0
> > 192.168.0.3
> > DNS: 192.168.0.1
> > I also cannot share any files as the Domain blocks me and I cannot see
> > any other PC's
> >
> > I have disabled all Firewalls, AntiVirus (ESed) and who the hell know
> > what else.
> >
> > Just seems that the Domain is blocking all users, however, no problem
> > to join but after that, that's it.
> >
> > I am really really frustrated and hope that someone out there can give
> > me some clues. Thanks in advance
> >
>
>
>

Hello Somchai,

Check that the TCP/IP NetBios Helper service is started on all machines.
What about the computer browser service, is it started?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Dear Meinolf, thank you for your reply. Please find below
> %logonserver% and ipconfig from Server ILS-DC and one PC.
>
> Also the DNS on ILS-DC is ILSPK.LOCAL and in the AD Users and
> Computers it is ILSPK.LOCAL
>
> C:\Documents and Settings\mgr3>echo %logonserver%
> \\ILS-DC
> C:\Documents and Settings\mgr3>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : aemgr
> Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : ILSPK.LOCAL
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Atheros L1 Gigabit
> Ethernet
> 10/100/1
> 000Base-T Controller
> Physical Address. . . . . . . . . : 00-1D-60-AE-4C-5E
> Dhcp Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.0.59
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.0.3
> DNS Servers . . . . . . . . . . . : 192.168.0.1
> C:\Users\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : ILS-DC
> Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : ILSPK.LOCAL
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
> Server A
> apter
> Physical Address. . . . . . . . . : 00-23-7D-32-F5-9E
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred)
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.0.3
> DNS Servers . . . . . . . . . . . : 192.168.0.1
> NetBIOS over Tcpip. . . . . . . . : Enabled
> Tunnel adapter Local Area Connection* 8:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . :
> isatap.{9850C111-1184-4964-BE40-D4D0FCEF
> D4C}
> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> Tunnel adapter Local Area Connection* 9:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Teredo Tunneling
> Pseudo-Interface
> Physical Address. . . . . . . . . : 02-00-54-55-4E-01
> DHCP Enabled. . . . . . . . . . . : No
> Autoconfiguration Enabled . . . . : Yes
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Somchai,
>>
>> Are you able to logon on a client machine to the domain with a domain
>> user acocunt? If you run "echo %logonserver%" wihtout the quotes on
>> the client, which machine is listed as logonserver, client computer
>> or server?
>>
>> Additional post the AD doain name shown in AD UC, the domain name
>> listed in DNS zones and the NetBios name.
>>
>> Unfortunal the ipconfig /all is not original, so are the
>> server/clients enabled for NetBios over TCP/IP? Does the server has a
>> second NIC in use?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I have posted this about two months ago but still haven't been able
>>> to
>>> fix
>>> the problem. Here we go first with the setup:
>>> Originally we had one server which acted as a DC/AD and also as a
>>> Web
>>> Application Server where people had to access from outside. Then we
>>> installed a new server (2008) and made this as the DC, AD, DHCP, DNS
>>> and I
>>> demoted the old server from a DC/AD and joined it to the Domain
>>> together with
>>> all the PC's. No Problem at all to join them all.
>>> The problem started when I wanted to map the Drives. I went to
>>> Network - Entire Network - Microsoft Network and there I see the
>>> Domain ADCPK. When I click on it with all logins even Administrator
>>> I
>>> am getting an Error You not have permission to access this.......
>>> However, if I go to run and type the servers IP address I can access
>>> the server no problem and map it. I ping the servers IP no problem
>>> and weired enough I also can ping the servers name. But for some
>>> reason the Domain doesn't accept any user. Somehow I got stuck with
>>> no
>>> permission on the Domain ADCK.
>>> On the DC/DNS itself it shows that the DNS is running and all the
>>> PC's are shown with their names.
>>>
>>> ipconfig /all for Server:
>>> 192.168.0.1
>>> 255.255.255.0
>>> 192.168.0.3
>>> DNS: 192.168.0.1
>>> ipconfig /all for PC's
>>> 192.168.0.51 - 254
>>> 255.255.255.0
>>> 192.168.0.3
>>> DNS: 192.168.0.1
>>> I also cannot share any files as the Domain blocks me and I cannot
>>> see
>>> any other PC's
>>> I have disabled all Firewalls, AntiVirus (ESed) and who the hell
>>> know what else.
>>>
>>> Just seems that the Domain is blocking all users, however, no
>>> problem to join but after that, that's it.
>>>
>>> I am really really frustrated and hope that someone out there can
>>> give me some clues. Thanks in advance
>>>

Hello Meinolf,

I am not sure but I believe that solved it. The Browser service on the
server wasn't started. It was set to disabled. I have started the service
and then it worked. However, I only could test it on one PC as I am doing it
remote but I see the the server, etc. no Problem.
I will keep you posted of the final outcome. Anyway thanks a lot in advance.

"Meinolf Weber [MVP-DS]" wrote:

> Hello Somchai,
>
> Check that the TCP/IP NetBios Helper service is started on all machines.
> What about the computer browser service, is it started?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Dear Meinolf, thank you for your reply. Please find below
> > %logonserver% and ipconfig from Server ILS-DC and one PC.
> >
> > Also the DNS on ILS-DC is ILSPK.LOCAL and in the AD Users and
> > Computers it is ILSPK.LOCAL
> >
> > C:\Documents and Settings\mgr3>echo %logonserver%
> > \\ILS-DC
> > C:\Documents and Settings\mgr3>ipconfig /all
> >
> > Windows IP Configuration
> >
> > Host Name . . . . . . . . . . . . : aemgr
> > Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
> > Node Type . . . . . . . . . . . . : Unknown
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> > DNS Suffix Search List. . . . . . : ILSPK.LOCAL
> > Ethernet adapter Local Area Connection:
> >
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . : Atheros L1 Gigabit
> > Ethernet
> > 10/100/1
> > 000Base-T Controller
> > Physical Address. . . . . . . . . : 00-1D-60-AE-4C-5E
> > Dhcp Enabled. . . . . . . . . . . : No
> > IP Address. . . . . . . . . . . . : 192.168.0.59
> > Subnet Mask . . . . . . . . . . . : 255.255.255.0
> > Default Gateway . . . . . . . . . : 192.168.0.3
> > DNS Servers . . . . . . . . . . . : 192.168.0.1
> > C:\Users\Administrator>ipconfig /all
> >
> > Windows IP Configuration
> >
> > Host Name . . . . . . . . . . . . : ILS-DC
> > Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
> > Node Type . . . . . . . . . . . . : Hybrid
> > IP Routing Enabled. . . . . . . . : No
> > WINS Proxy Enabled. . . . . . . . : No
> > DNS Suffix Search List. . . . . . : ILSPK.LOCAL
> > Ethernet adapter Local Area Connection:
> >
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
> > Server A
> > apter
> > Physical Address. . . . . . . . . : 00-23-7D-32-F5-9E
> > DHCP Enabled. . . . . . . . . . . : No
> > Autoconfiguration Enabled . . . . : Yes
> > IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred)
> > Subnet Mask . . . . . . . . . . . : 255.255.255.0
> > Default Gateway . . . . . . . . . : 192.168.0.3
> > DNS Servers . . . . . . . . . . . : 192.168.0.1
> > NetBIOS over Tcpip. . . . . . . . : Enabled
> > Tunnel adapter Local Area Connection* 8:
> >
> > Media State . . . . . . . . . . . : Media disconnected
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . :
> > isatap.{9850C111-1184-4964-BE40-D4D0FCEF
> > D4C}
> > Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
> > DHCP Enabled. . . . . . . . . . . : No
> > Autoconfiguration Enabled . . . . : Yes
> > Tunnel adapter Local Area Connection* 9:
> >
> > Media State . . . . . . . . . . . : Media disconnected
> > Connection-specific DNS Suffix . :
> > Description . . . . . . . . . . . : Teredo Tunneling
> > Pseudo-Interface
> > Physical Address. . . . . . . . . : 02-00-54-55-4E-01
> > DHCP Enabled. . . . . . . . . . . : No
> > Autoconfiguration Enabled . . . . : Yes
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello Somchai,
> >>
> >> Are you able to logon on a client machine to the domain with a domain
> >> user acocunt? If you run "echo %logonserver%" wihtout the quotes on
> >> the client, which machine is listed as logonserver, client computer
> >> or server?
> >>
> >> Additional post the AD doain name shown in AD UC, the domain name
> >> listed in DNS zones and the NetBios name.
> >>
> >> Unfortunal the ipconfig /all is not original, so are the
> >> server/clients enabled for NetBios over TCP/IP? Does the server has a
> >> second NIC in use?
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> I have posted this about two months ago but still haven't been able
> >>> to
> >>> fix
> >>> the problem. Here we go first with the setup:
> >>> Originally we had one server which acted as a DC/AD and also as a
> >>> Web
> >>> Application Server where people had to access from outside. Then we
> >>> installed a new server (2008) and made this as the DC, AD, DHCP, DNS
> >>> and I
> >>> demoted the old server from a DC/AD and joined it to the Domain
> >>> together with
> >>> all the PC's. No Problem at all to join them all.
> >>> The problem started when I wanted to map the Drives. I went to
> >>> Network - Entire Network - Microsoft Network and there I see the
> >>> Domain ADCPK. When I click on it with all logins even Administrator
> >>> I
> >>> am getting an Error You not have permission to access this.......
> >>> However, if I go to run and type the servers IP address I can access
> >>> the server no problem and map it. I ping the servers IP no problem
> >>> and weired enough I also can ping the servers name. But for some
> >>> reason the Domain doesn't accept any user. Somehow I got stuck with
> >>> no
> >>> permission on the Domain ADCK.
> >>> On the DC/DNS itself it shows that the DNS is running and all the
> >>> PC's are shown with their names.
> >>>
> >>> ipconfig /all for Server:
> >>> 192.168.0.1
> >>> 255.255.255.0
> >>> 192.168.0.3
> >>> DNS: 192.168.0.1
> >>> ipconfig /all for PC's
> >>> 192.168.0.51 - 254
> >>> 255.255.255.0
> >>> 192.168.0.3
> >>> DNS: 192.168.0.1
> >>> I also cannot share any files as the Domain blocks me and I cannot
> >>> see
> >>> any other PC's
> >>> I have disabled all Firewalls, AntiVirus (ESed) and who the hell
> >>> know what else.
> >>>
> >>> Just seems that the Domain is blocking all users, however, no
> >>> problem to join but after that, that's it.
> >>>
> >>> I am really really frustrated and hope that someone out there can
> >>> give me some clues. Thanks in advance
> >>>
>
>
>

Hello Somchai,

So i wait for the outcome.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello Meinolf,
>
> I am not sure but I believe that solved it. The Browser service on
> the
> server wasn't started. It was set to disabled. I have started the
> service
> and then it worked. However, I only could test it on one PC as I am
> doing it
> remote but I see the the server, etc. no Problem.
> I will keep you posted of the final outcome. Anyway thanks a lot in
> advance.
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Somchai,
>>
>> Check that the TCP/IP NetBios Helper service is started on all
>> machines. What about the computer browser service, is it started?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Dear Meinolf, thank you for your reply. Please find below
>>> %logonserver% and ipconfig from Server ILS-DC and one PC.
>>>
>>> Also the DNS on ILS-DC is ILSPK.LOCAL and in the AD Users and
>>> Computers it is ILSPK.LOCAL
>>>
>>> C:\Documents and Settings\mgr3>echo %logonserver%
>>> \\ILS-DC
>>> C:\Documents and Settings\mgr3>ipconfig /all
>>> Windows IP Configuration
>>>
>>> Host Name . . . . . . . . . . . . : aemgr
>>> Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
>>> Node Type . . . . . . . . . . . . : Unknown
>>> IP Routing Enabled. . . . . . . . : No
>>> WINS Proxy Enabled. . . . . . . . : No
>>> DNS Suffix Search List. . . . . . : ILSPK.LOCAL
>>> Ethernet adapter Local Area Connection:
>>> Connection-specific DNS Suffix . :
>>> Description . . . . . . . . . . . : Atheros L1 Gigabit
>>> Ethernet
>>> 10/100/1
>>> 000Base-T Controller
>>> Physical Address. . . . . . . . . : 00-1D-60-AE-4C-5E
>>> Dhcp Enabled. . . . . . . . . . . : No
>>> IP Address. . . . . . . . . . . . : 192.168.0.59
>>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>>> Default Gateway . . . . . . . . . : 192.168.0.3
>>> DNS Servers . . . . . . . . . . . : 192.168.0.1
>>> C:\Users\Administrator>ipconfig /all
>>> Windows IP Configuration
>>>
>>> Host Name . . . . . . . . . . . . : ILS-DC
>>> Primary Dns Suffix . . . . . . . : ILSPK.LOCAL
>>> Node Type . . . . . . . . . . . . : Hybrid
>>> IP Routing Enabled. . . . . . . . : No
>>> WINS Proxy Enabled. . . . . . . . : No
>>> DNS Suffix Search List. . . . . . : ILSPK.LOCAL
>>> Ethernet adapter Local Area Connection:
>>> Connection-specific DNS Suffix . :
>>> Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit
>>> Server A
>>> apter
>>> Physical Address. . . . . . . . . : 00-23-7D-32-F5-9E
>>> DHCP Enabled. . . . . . . . . . . : No
>>> Autoconfiguration Enabled . . . . : Yes
>>> IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred)
>>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>>> Default Gateway . . . . . . . . . : 192.168.0.3
>>> DNS Servers . . . . . . . . . . . : 192.168.0.1
>>> NetBIOS over Tcpip. . . . . . . . : Enabled
>>> Tunnel adapter Local Area Connection* 8:
>>> Media State . . . . . . . . . . . : Media disconnected
>>> Connection-specific DNS Suffix . :
>>> Description . . . . . . . . . . . :
>>> isatap.{9850C111-1184-4964-BE40-D4D0FCEF
>>> D4C}
>>> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
>>> DHCP Enabled. . . . . . . . . . . : No
>>> Autoconfiguration Enabled . . . . : Yes
>>> Tunnel adapter Local Area Connection* 9:
>>> Media State . . . . . . . . . . . : Media disconnected
>>> Connection-specific DNS Suffix . :
>>> Description . . . . . . . . . . . : Teredo Tunneling
>>> Pseudo-Interface
>>> Physical Address. . . . . . . . . : 02-00-54-55-4E-01
>>> DHCP Enabled. . . . . . . . . . . : No
>>> Autoconfiguration Enabled . . . . : Yes
>>> "Meinolf Weber [MVP-DS]" wrote:
>>>> Hello Somchai,
>>>>
>>>> Are you able to logon on a client machine to the domain with a
>>>> domain user acocunt? If you run "echo %logonserver%" wihtout the
>>>> quotes on the client, which machine is listed as logonserver,
>>>> client computer or server?
>>>>
>>>> Additional post the AD doain name shown in AD UC, the domain name
>>>> listed in DNS zones and the NetBios name.
>>>>
>>>> Unfortunal the ipconfig /all is not original, so are the
>>>> server/clients enabled for NetBios over TCP/IP? Does the server has
>>>> a second NIC in use?
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> I have posted this about two months ago but still haven't been
>>>>> able
>>>>> to
>>>>> fix
>>>>> the problem. Here we go first with the setup:
>>>>> Originally we had one server which acted as a DC/AD and also as a
>>>>> Web
>>>>> Application Server where people had to access from outside. Then
>>>>> we
>>>>> installed a new server (2008) and made this as the DC, AD, DHCP,
>>>>> DNS
>>>>> and I
>>>>> demoted the old server from a DC/AD and joined it to the Domain
>>>>> together with
>>>>> all the PC's. No Problem at all to join them all.
>>>>> The problem started when I wanted to map the Drives. I went to
>>>>> Network - Entire Network - Microsoft Network and there I see the
>>>>> Domain ADCPK. When I click on it with all logins even
>>>>> Administrator
>>>>> I
>>>>> am getting an Error You not have permission to access this.......
>>>>> However, if I go to run and type the servers IP address I can
>>>>> access
>>>>> the server no problem and map it. I ping the servers IP no
>>>>> problem
>>>>> and weired enough I also can ping the servers name. But for some
>>>>> reason the Domain doesn't accept any user. Somehow I got stuck
>>>>> with
>>>>> no
>>>>> permission on the Domain ADCK.
>>>>> On the DC/DNS itself it shows that the DNS is running and all the
>>>>> PC's are shown with their names.
>>>>> ipconfig /all for Server:
>>>>> 192.168.0.1
>>>>> 255.255.255.0
>>>>> 192.168.0.3
>>>>> DNS: 192.168.0.1
>>>>> ipconfig /all for PC's
>>>>> 192.168.0.51 - 254
>>>>> 255.255.255.0
>>>>> 192.168.0.3
>>>>> DNS: 192.168.0.1
>>>>> I also cannot share any files as the Domain blocks me and I cannot
>>>>> see
>>>>> any other PC's
>>>>> I have disabled all Firewalls, AntiVirus (ESed) and who the hell
>>>>> know what else.
>>>>> Just seems that the Domain is blocking all users, however, no
>>>>> problem to join but after that, that's it.
>>>>>
>>>>> I am really really frustrated and hope that someone out there can
>>>>> give me some clues. Thanks in advance
>>>>>