Unable to login

I thought this "Active Directory" Thing for W2K server was supposed to be an improvement. Instead, it seems to be doing it's best to prevent anyone from accessing the network. Windows 98 machines return a message of "...denied access to your logon server." - I reset the password, but it made no diference. On XP machines, it simply hangs while displaying the message "Applying computer settings" in that cute little box (I bet MS thinks it's cute, anyway...)

I can't re-install W2K server, as it came pre-installed at the clients (they did not get it from us!), and I was simply told to configure it.
Ideas/suggestions - shotguns don't count, I've tried them before. Satisfying, but inneffective, and difficult to undo.

 

Is this a network that was moved from classic NT4 domains to 2K AD.

The XP machines sound like they are dealing with changes pushed down by scripts or similar. Are you using logon scripts?

When you installed the 2K server(s) for AD, could they see an authoritative DNS server during this process?

Any likely events on any of the DCs with details on the 98 logon failures?

AD is absolutely better for large WANs. I'm really not so sure about smaller LANS though.

 

Hi Newt,
This is a brand new network. The client bought the server with W2K server pre-installed, and then asked us to configure the PCs for the domain. This is definitely a small LAN (<10 users), altho it does use 3 cascading proxies to access the internet (long story, not important to current dificulties). I looked briefly at the various user settings and couldn't see anything about scripts, but just to be sure, under which tab would I look, specifically, when looking at a user's properties?

One thing I was wondering, could the problem be a timing issue, IE server doesn't create/activate the account right away, but when the machine updates itself? I realise this doesn't sound logical with the directories being "active ", but I very quickly learned not to trust Microsoft. Too much of their names and what-not seem to bear as much resemblance to reality as Tokyo Rose.

Thanks

 

You didn't mention if there are any likely looking errors/warnings in the DCs event logs about the problems.

Also, if you aren't running a WINS server, do yourself a favor and set one up. 9X really likes WINS better than DNS.

Single network?

Take a look in C:\WINNT\SYSVOL\sysvol\domainname\scripts and see what logon scripts you have. Then take a look Here to see if you are applying any and a bunch of other good information that may help you. Especially the GPO stuff.