Announcement

Collapse
No announcement yet.

Problems with users login to Domain

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Problems with users login to Domain

    I have a problem when i try to log on from my pc to AD in the domain.
    When i boot the pc, and enter username, password and domain to which i want to log on, i need to wait 3-4 minutes, at Applying your personal settings... pop
    up. After that i can log on, but when i check logs on my pc, at Application logs i fount thise two logs:

    -----> LOG1
    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1030
    Date: 1/27/2011
    Time: 10:05:29 AM
    User: DOMAIN\user1
    Computer: user1pc
    Description:
    Windows cannot query for the list of Group Policy objects.
    A message that describes the reason for this was previously logged by the policy engine.


    For more information, see Help and Support Center at ...

    ----> LOG2
    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1006
    Date: 1/27/2011
    Time: 10:05:29 AM
    User: DOMAIN\user1
    Computer: user1pc
    Description:
    Windows cannot bind to domain.com domain. (Local Error).
    Group Policy processing aborted.

    For more information,
    see Help and Support Center at ...

    I log off and log on back several times, and its the same situation, 3-4 minutes waiting at log on, and always this two logs.


    The DFS service is started at DC.
    -------------
    About sysvol:
    -------------
    I have the following path: c:\Windows\sysvol\sysvol\domain.com\

    For the File permisions:
    ********************
    C:\Windows\sysvol\

    Folder is not shared.

    Authenticated users and Server Operators have Read&Execute
    Administrators, Creator Owners and System have Full Control

    In the column Inherited From: they all have <not inherited>

    In the column Apply To:
    Creator Owner: Subfolders and Files only
    Others: This foler, subfolders and files

    Check box: Allow inheritable permissions from the parrent to propagate... is Unchecked
    Check box: Replace permmision enttries on all child objects... is unchecked

    ************************
    C:\Windows\sysvol\sysvol\

    Folder is shared.

    Administrators: Full control
    Authenticated users: Read & Execute, List Folder Contents, Read
    Creator Owner: Full control
    SYSTEM: Full control
    Server Operators: Read and Execute
    Everyone: Read & Execute
    Domain users: Read & Execute



    In the column Inherited from for Domain users and Everyone is <not inherited>
    For the rest is "inherited from C:\\Windows\sysvol\"

    In the column Apply to
    For Creator Owner: Subfolders and files only
    For Everyone: This folder only
    For all the rest: This folder, subfolders and files

    Check box: Allow inheritable permissions from the parrent to propagate... is Unchecked for all
    Check box: Replace permmision enttries on all child objects... is unchecked
    *********************************


    Any ideas, solutions?

  • #2
    Re: Problems with users login to Domain

    Hi,

    what are your clients, winxp/win7
    Based on the OS enable GPO logging for them

    once you have log upload it for review

    on Sysvol, you shud have everyone (pretty much default)or authenticated users read and execute permission and inheritance should be checked.
    Thanks & Regards
    v-2nas

    MCTS 2008, MCTIP, MCSE 2003, MCSA+Messaging E2K3, MCP, E2K7
    Sr. Wintel Eng. (Investment Bank)
    Independent IT Consultant and Architect
    Blog: http://www.exchadtech.blogspot.com

    Show your appreciation for my help by giving reputation points

    Comment


    • #3
      Re: Problems with users login to Domain

      All the clients are XP.

      I experience this problem on my PC.
      It;s not the case on the other pc's.

      I tried with gpupdate, and it creates the same two logs.

      I reset the computer account in AD, and ad it again to my user acount, and the same problem again.

      I don't know how to enable GPO logging for my pc.
      I'm only using logs in Event Viewer.

      Comment


      • #4
        Re: Problems with users login to Domain

        Hi,

        Follow the artcile to enable verbose only for userenv

        http://msdn.microsoft.com/en-us/libr...=ws.10%29.aspx
        Thanks & Regards
        v-2nas

        MCTS 2008, MCTIP, MCSE 2003, MCSA+Messaging E2K3, MCP, E2K7
        Sr. Wintel Eng. (Investment Bank)
        Independent IT Consultant and Architect
        Blog: http://www.exchadtech.blogspot.com

        Show your appreciation for my help by giving reputation points

        Comment

        Working...
        X