Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: nmtrier on February 01, 2008, 11:31:03 PM

Title: Windows XP - new users cannot perform domain logon
Post by: nmtrier on February 01, 2008, 11:31:03 PM

I have an installation with SME Server 7.3, upgraded over the years from e-smith days.  It is acting as the PDC for domain logons. There are 2 Windows XP PCs which are used by 2 users who have loggged in to the domain with no problems - for around 3 years.  Some time ago I added myself as a third user, and successfully used one of the 2 machines to logon to the domain - I never had a reason to log on using the 2nd PC.  I also logged on as admin to the domain with no problems on both PCs.  Recently I added an additional user, and her account cannot logon to the domain on either PC.  I cannot logon using the 2nd PC (where I have never previously tried before).  Neither of the 2 original users can logon using each others' PCs - again they had never tried before.  All can access Webmail, so the passwords are ok.  An old W98 PC which is setup for User level Security via the server allows all these accounts to logon.  So I begin to think that the XP PCs are using cached authentication details dating to a time when the PDC worked for them, and the XP PCs are no longer actively achieving server authentication (although there is no error message to that effect).  Hence users who have never logged on to the domain on those PCs cannot because there are no cached authentication details.  I have scoured the forums and buglist and cannot find any other similar reports, and since the W98 authentication appears to work, I assume this is an XP issue arising from an SME-server upgrade at some point in time.  Any suggestions?
(Already posted to bug tracker so don't flame)

Title: Re: Windows XP - new users cannot perform domain logon
Post by: nmtrier on February 04, 2008, 10:11:33 PM

Fixed by removing PC from domain and re connecting - then all domain logons worked.  Apparently after the upgrade from SME Server 6.x to 7.0 the PCs thought they were part of the domain, and the server didn't so they used cached credentials - I know, the users should have changed their passwords which would have brought that into the open soooner!