No Domain Server at logon

[weazel]

Ok, on my network I have 7 win2k machines and 3 ME machines. I cannot get the ME boxes to logon to the domain. They do however get ip addresses, are able to browse the net, share files and folders.
Users are entered correctly on the domain controller and the ME settings are correct. They are set for logon to an NT domain and restore network shares. when the computers boot I get the logon screen but after the password is entered I get a No domain was found to verify your password. I've double and triple checked my settings so I think its something stupid I'm over looking. Any ideas???

[goodespeler]

Ok,
This is a difficult problem. There is no way you could surf the net and share files on the network without actually finding the domain server. There has to be some reason, good luck. Doubly make sure all the host names and users are correct.

[weazel]

ok, I forgot to install the dsclient software...duh...unfortunately it locks up during the install

[imd14u]

Did you add accounts for the computers in the server?
:confused:

[silencio]

..only an NT machine will join the domain. you can logon to a domain with a 9x/ME box but that box will never join the domain. it doesn't need and can't have a computer account.

[weazel]

Ok, so is it necessary to install the dsclient software ??? I'm kinda confused on that point. Whats the purpose of the dsclient software?

[Milenko]

You shouldn't have to install any software just to log a machine on to a domain. My first concern would be if your domain controllers are win2k servers, then you may not have set them up to accept logins from pre-windows 2000 machines. I mention this because all of your 2000 machines logon perfectly.

So, are your domain controllers NT or 2000?

[weazel]

The domain controller is 2000 Advanced Server

[Milenko]

OK - you have to make sure that 2000 adv server is setup to accept logins from pre-windows 2000 machines.

To check this(on yer server), click start, then programs, then administrative tools, then active directory users and computers. In the column on the left, right-click your server and go to properties. Under domain operation mode, your mode should be mixed mode). If it's not, that's yer problem.

[weazel]

hmmm...nope its set to mixed mode

[condor]

okay..
try this..

1. ping the servers IP ..
2. Ping Servers DNS name
3. Ping Server NetBIOS name..
4. Check that you got the workgroup and domain name right..
5. make sure the computer name has no special characters
6. make sure your Access Control is set to get the ACL from your doamin...

[Milenko]

It's weird that it's ONLY the ME systems that can't join the domain though. I think it has something to do with the 2k server and pre-2k logons.

What happens if you try to log a win98 machine onto the domain? If you have one that you could try, that would help us narrow it down a bit.

[imd14u]

Originally posted by iateyourcat:
..only an NT machine will join the domain. you can logon to a domain with a 9x/ME box but that box will never join the domain. it doesn't need and can't have a computer account.

You can join the ME boxes to the domain. You can also create computer accounts for the machines also, using the computer names.

One thing to check, when logging on with a user name and password, are you using roaming profiles? Are these Administrator accounts?

Try using an account that's qualified to have computers join the domain.
;)

[Ron Prestenback]

Here's one more thing you can check: Have you applied any Security templates to your Server box? If you have applied the High Security security template (MMC snap-in) at some point, this will disallow non-NTFS computers from logging into the domain (no file-level security)

[Ron Prestenback]

I just thought of something else...make sure the time on your WinME computers are set up to within fifteen or so minutes of the Server. This would also keep you from joining a domain...

[Lowland]

Well, ya know, there's a lot to know!

List reads:

Got same client software on (Client for MS Networks et al) each machine
Got file and print sharing enabled
Got domain master disabled on all except PDC
Got TCP/IP on all machines (Don't run any other protocols - unless you really need)
Got look for DHCP to get IP address on all macines
DHCP allocation OK on PDC
Hubs? Are the ME's on one hub - check crossover
Backwards compatibility - we've got 9x, NT and 2k all on net and all PARTICIPATING IN DOMAIN SECURITY - which is what really counts when adding a box to a domain
Got accounts for all users set up - no access restrictions, time restrictions etc - of course you should have these in Groups, just labouring the point
Cables - you wire 'em? if all cabled, swap some cables from OK machines to ME's
DNS disabled?
There,s a lot more you could check......

[silencio]

Originally posted by b4uc1i81:
You can join the ME boxes to the domain. You can also create computer accounts for the machines also, using the computer names.

One thing to check, when logging on with a user name and password, are you using roaming profiles? Are these Administrator accounts?

Try using an account that's qualified to have computers join the domain.
;)

PLONK.

Only an NT box will join the domain. Period.

"Machine Accounts
Unlike Windows 9x, Windows 2000 computers that are to participate in a Microsoft network domain require a machine account on that domain." ..per Technet

Machine accounts relate to security and managability. In order to fully administer a 9x machine you need remote registry services installed. In addition, 9x or ME boxes do NOT support the same level of security of NT and will NEVER join a domain. You may see their computer name show up in server manager but they are NOT part of the domain.

[jimmm33]

I have been following this post because I having the same problem with a Win98 box seeing a win2000 domain.

If a win98 machine can't be part of a domain then why is the win9x client on the win2000 disk?

Is everyone on the network going to have to move to win2000 or are they going to have to stay a workgroup without a domain?

[ShadowKing]

FYI: There is a great tool that comes on the CD in the support/tools folder called NetDiag. It can be used to troubleshoot the whole TCP/IP stack all at once...

[KINGofBLEH]

Originally posted by Weazel:
Ok, so is it necessary to install the dsclient software ??? I'm kinda confused on that point. Whats the purpose of the dsclient software?

The Distributed File System (DFS) was the beta predecessor to the active directory for Windows NT 4 domains. As far as I know it was never actually released for general use because Win 2k Server was release a short time later. However, at that point it had already spread to many companies. It was originally designed to allow Win 9x/ME machines to access shared resources in the active directory.

If your ME clients no not need to access any shared folders or printers on that domain, they do not need DFS to authenticate on the domain. If they need to access the shared folders and printers, then I am afraid DFS is necessary.

One solution would be to convert to domain to a Win 2k domain and assign rights and privileges to those shared resources through the active directory. Another option would be to upgrade those ME clients to NT or 2000 professional (depending on your 2000 license agreement).

[iamtheman]

O.K. here's a thought Windows 2000 machines use DNS to resolve host names to IP addresses by default and query the Active Directory. The other O/S's rely much heavier on Netbios resolution, in other words WINS, especially when you can't get the DS client installed. I didn't see any mention of what you are using for name resolution so if you haven't already make sure you install WINS. I have it running on every Active Directory install that still has pre-2000 client machines, Wins doesn't seem to want to go away.