Topic: Win2000 Domain Logon

[Suzanne Routley]

Hi,
I'm sorry to bring this topic up again, but I can not get my win2000pro machine to join a domain, I have just upgraded to version 5.1.2 hoping this may fix the problem, but I am now convinced that I am doing something wrong. Could somebody please explain the proceedure. and terminology to me eg machine account etc.

Here is my proceedure to pick holes in

1) Start network identification wizard
2)Tick "this computer is part of a business network"
3)Tick "my computer uses a network with a domain"
4)In the "user name" feild I type the current logged on win2000pro user and in the "password" feild the password of the same user. In the "domain" feild I type the workgroup name I have chosen for the network.
5)In the "computer name" feild I type the windows netbios name and in the "domain" feild I type the workgroup name again.
6)In the final window it askes for the uses name and password with permission to join the domain, I have tried just about every user name and password with no sucess including "root" and the root password for the e-smith server.

I always get the following message about there being a conflicting set of credentials.

I would really appreciate some help with this problem

Many Thanks

[Jon Blakely]

Login as Administrator and perform the following:

right-click on My Computer, and select Properties
click on the Network Identification tab, and click the Properties button
set the radio button at the bottom of the window to Domain, and enter the name of your domain (which is the same as the workgroup name you entered in the server-manager).  Then select OK.
you will see a window asking for a username and password with permission to add the computer to the domain.  Enter 'admin' for the username (do not use "root" or any other username), and use your admin password.
After a minute, you should be rewarded with "Welcome to the domain".

Troubleshooting - Common Errors
"The Credentials supplied conflict with an existing set of credentials"
This error is almost always caused by already having an existing connection to the server while trying to join the domain.  To check on this, bring up a command prompt on your Windows box and type net use.  If it lists any connections to the server, do net use \servername /delete and try joining the domain again.

"The account supplied is a computer account"
This error may arise if the domain that you're trying to join has the same name as your workgroup.  Change the name of the workgroup on your Windows machine, reboot, and then try joining the domain.


you may also need to change Windows 2000/XP Registry Settings

It is suggested that you check the following registry entries which should be set to (0).  This is the default under W2K (but check to confirm) however under XP the default is (1) and definitely needs changing:

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters]
"requirestrongkey"=dword:00000000
"requiresignorseal"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Netlogon\Parameters]
"requirestrongkey"=dword:00000000
"requiresignorseal"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requirestrongkey"=dword:00000000
"requiresignorseal"=dword:00000000

[Darren]

if the pervious doesn't work my suggestion is to login to your server and check there is a samba user called root

this is done by
smbpasswd -e root

if an error is displayed you will have to create a user called root
this is done by

smbpasswd -add root     (adds the user)

smbpasswd root         (this will ask for a password )

smbpasswd -e root    ( this enables the user)

if the user already exists
you will get (Enabled User Root)

and when allocating a domain you use the user  root  with the password  and then your domain.

never use a normal user to allocate to the domain because it won't work



Good Luck

[Suzanne]

Thanks for all your help, I have got all my win 2000 machines to log on to the proper domain, at last.

[johan]

i have installed SME Server and configure to be a master windows controler domain, the Workstation join success the domain, but i can't loggin it with the account create in SME Server ??? why ???

[Terry Brummell]

Johan, that's like saying "My car doesn't start, why?".  How about some details!  Did you click "Options" in the 2K logon box and select the domain instead of the local machine?  What error do you get?  If you logon to the 2K machine locally can you browser the network?  Please provide more details and maybe someone will be able to help you.

Terry

[johan]

thanks, i read the last messages and i found my error....
i modify the registry of my windows ....