Okay, I'm really starting to run out of ideas here. Any help would really be handy. I'm looking after a small network, clients are running win2000 SP3 and a Linux Server running samba, doing domain logins. Everything is working fine apart from two machines (from ten). Probably once a week one of them will fail to login in after a reboot or log off. If any user tries to login into the domain it comes up with the error "The system cannot log you on to the domain because the systems computer account in its primary domain is missing or the password on that account is incorrect." Now the fix for this is simple enough. I log into the local machine put the workstation back to a workgroup, reboot, log in and re-add the computer to the domain and every ones happy ( for a week or so). I've re-imaged the machines from one of the machines on the network that doesn't exhibit the problem and sure enough, after a week or so, down she goes. I've physically swapped one of the failing machines out for a working one and shortly after the "new" machine is failing again. There is no difference in the software or hardware between any of the machines on the network, all part of the same roll out, all on the same image. All of the machines except for one have done had this problem, but only once, after I put them to workgroup then back to domain they're happy and have been for six months, it's just these two machines that keep doing it. The two failing machines are not near each other but they are occasionally used by the same user. I've got the logs if that will help people. Any help really apreciated, Finn.
What did you use to do the roll out? Ghost? big question... did you change the SIDs? Ghostwalker or Sysprep? I saw this problem way back before I knew anything about NT. Jim ----- Original Message ----- From: "Finn Blucher" <finn@finerdetails.com.au> To: <samba@lists.samba.org> Sent: Wednesday, February 26, 2003 7:21 PM Subject: [Samba] Samba Domain Login> Okay, > I'm really starting to run out of ideas here. Any help would really > be handy. I'm looking after a small network, clients are running win2000 > SP3 and a Linux Server running samba, doing domain logins. Everything is > working fine apart from two machines (from ten). Probably once a week > one of them will fail to login in after a reboot or log off. If any > user tries to login into the domain it comes up with the error "The > system cannot log you on to the domain because the systems computer > account in its primary domain is missing or the password on > that account is incorrect." Now the fix for this is simple enough. I log > into the local machine put the workstation back to a workgroup, reboot, > log in and re-add the computer to the domain and every ones happy ( for > a week or so). I've re-imaged the machines from one of the machines on > the network that doesn't exhibit the problem and sure enough, after a > week or so, down she goes. I've physically swapped one of the failing > machines out for a working one and shortly after the "new" machine is > failing again. There is no difference in the software or hardware > between any of the machines on the network, all part of the same roll > out, all on the same image. All of the machines except for one have done > had this problem, but only once, after I put them to workgroup then back > to domain they're happy and have been for six months, it's just these > two machines that keep doing it. The two failing machines are not near > each other but they are occasionally used by the same user. I've got the > logs if that will help people. > > Any help really apreciated, > Finn. > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >
On Thu, 27 Feb 2003, Finn Blucher wrote: Finn, What version of Samba are you running? Please email me your smb.conf file off line to <jht@samba.org>. - John T.> Okay, > I'm really starting to run out of ideas here. Any help would really > be handy. I'm looking after a small network, clients are running win2000 > SP3 and a Linux Server running samba, doing domain logins. Everything is > working fine apart from two machines (from ten). Probably once a week > one of them will fail to login in after a reboot or log off. If any > user tries to login into the domain it comes up with the error "The > system cannot log you on to the domain because the systems computer > account in its primary domain is missing or the password on > that account is incorrect." Now the fix for this is simple enough. I log > into the local machine put the workstation back to a workgroup, reboot, > log in and re-add the computer to the domain and every ones happy ( for > a week or so). I've re-imaged the machines from one of the machines on > the network that doesn't exhibit the problem and sure enough, after a > week or so, down she goes. I've physically swapped one of the failing > machines out for a working one and shortly after the "new" machine is > failing again. There is no difference in the software or hardware > between any of the machines on the network, all part of the same roll > out, all on the same image. All of the machines except for one have done > had this problem, but only once, after I put them to workgroup then back > to domain they're happy and have been for six months, it's just these > two machines that keep doing it. The two failing machines are not near > each other but they are occasionally used by the same user. I've got the > logs if that will help people. > > Any help really apreciated, > Finn. >-- John H Terpstra Email: jht@samba.org
i like Jim's response about the SIDs if in fact you have taken care to be sure that the SIDs are unique I'd guess that for some reason the automatic password changing that windows does on machine accounts every few days is intermittently failing. Do the windows logs have anything about that in them? what about the samba logs? brad -- Bradley W. Langhorst <brad@langhorst.com>
Ok, yes, SID could be the issue. With each install of windows, there is a unique SID that gets created (I think). I recall seeing a caution about imaging W2k for this reason, the images will NOT have UNIQUE SID's. Anyone? There should be a way to cause windows to recreate a random sid? "Finn Blucher" <finn@finerdetails.com.au> wrote in message news:20030227112129.03f3c20a.finn@finerdetails.com.au...> Okay, > I'm really starting to run out of ideas here. Any help would really > be handy. I'm looking after a small network, clients are running win2000 > SP3 and a Linux Server running samba, doing domain logins. Everything is > working fine apart from two machines (from ten). Probably once a week > one of them will fail to login in after a reboot or log off. If any > user tries to login into the domain it comes up with the error "The > system cannot log you on to the domain because the systems computer > account in its primary domain is missing or the password on > that account is incorrect." Now the fix for this is simple enough. I log > into the local machine put the workstation back to a workgroup, reboot, > log in and re-add the computer to the domain and every ones happy ( for > a week or so). I've re-imaged the machines from one of the machines on > the network that doesn't exhibit the problem and sure enough, after a > week or so, down she goes. I've physically swapped one of the failing > machines out for a working one and shortly after the "new" machine is > failing again. There is no difference in the software or hardware > between any of the machines on the network, all part of the same roll > out, all on the same image. All of the machines except for one have done > had this problem, but only once, after I put them to workgroup then back > to domain they're happy and have been for six months, it's just these > two machines that keep doing it. The two failing machines are not near > each other but they are occasionally used by the same user. I've got the > logs if that will help people. > > Any help really apreciated, > Finn. > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >
Microsoft provides sysprep for this purpose. It is downloadable from their website. There is an option to run sysprep without having to run the whole minisetup routine. Symantec, Sysinternals and Powerquest also provide utilities to do the same thing. Jim> -----Original Message----- > From: samba-bounces+creole3=bellsouth.net@lists.samba.org > [mailto:samba-bounces+creole3=bellsouth.net@lists.samba.org]On > Behalf Of > Brent Torrenga > Sent: Friday, February 28, 2003 10:59 AM > To: samba@lists.samba.org > Subject: [Samba] Re: Samba Domain Login > > > Ok, yes, SID could be the issue. With each install of > windows, there is a > unique SID that gets created (I think). I recall seeing a > caution about > imaging W2k for this reason, the images will NOT have UNIQUE SID's. > > Anyone? > > There should be a way to cause windows to recreate a random sid? > > > "Finn Blucher" <finn@finerdetails.com.au> wrote in message > news:20030227112129.03f3c20a.finn@finerdetails.com.au... > > Okay, > > I'm really starting to run out of ideas here. Any help > would really > > be handy. I'm looking after a small network, clients are > running win2000 > > SP3 and a Linux Server running samba, doing domain logins. > Everything is > > working fine apart from two machines (from ten). Probably > once a week > > one of them will fail to login in after a reboot or log off. If any > > user tries to login into the domain it comes up with the error "The > > system cannot log you on to the domain because the systems computer > > account in its primary domain is missing or the password on > > that account is incorrect." Now the fix for this is simple > enough. I log > > into the local machine put the workstation back to a > workgroup, reboot, > > log in and re-add the computer to the domain and every ones > happy ( for > > a week or so). I've re-imaged the machines from one of the > machines on > > the network that doesn't exhibit the problem and sure > enough, after a > > week or so, down she goes. I've physically swapped one of > the failing > > machines out for a working one and shortly after the "new" > machine is > > failing again. There is no difference in the software or hardware > > between any of the machines on the network, all part of the > same roll > > out, all on the same image. All of the machines except for > one have done > > had this problem, but only once, after I put them to > workgroup then back > > to domain they're happy and have been for six months, it's > just these > > two machines that keep doing it. The two failing machines > are not near > > each other but they are occasionally used by the same user. > I've got the > > logs if that will help people. > > > > Any help really apreciated, > > Finn. > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >OutBound Mail Scanned by Mcafee Web Appliance.
Strike that, I just checked the sysprep docs and I can't find a way to run it wihtout running minisetup. The tool from sysinternals works very well though. Jim> -----Original Message----- > From: samba-bounces+creole3=bellsouth.net@lists.samba.org > [mailto:samba-bounces+creole3=bellsouth.net@lists.samba.org]On > Behalf Of > Jim Wharton > Sent: Friday, February 28, 2003 11:07 AM > To: 'Brent Torrenga'; samba@lists.samba.org > Subject: RE: [Samba] Re: Samba Domain Login > > > Microsoft provides sysprep for this purpose. It is > downloadable from their > website. There is an option to run sysprep without having to > run the whole > minisetup routine. > > Symantec, Sysinternals and Powerquest also provide utilities > to do the same > thing. > > Jim > > > -----Original Message----- > > From: samba-bounces+creole3=bellsouth.net@lists.samba.org > > [mailto:samba-bounces+creole3=bellsouth.net@lists.samba.org]On > > Behalf Of > > Brent Torrenga > > Sent: Friday, February 28, 2003 10:59 AM > > To: samba@lists.samba.org > > Subject: [Samba] Re: Samba Domain Login > > > > > > Ok, yes, SID could be the issue. With each install of > > windows, there is a > > unique SID that gets created (I think). I recall seeing a > > caution about > > imaging W2k for this reason, the images will NOT have UNIQUE SID's. > > > > Anyone? > > > > There should be a way to cause windows to recreate a random sid? > > > > > > "Finn Blucher" <finn@finerdetails.com.au> wrote in message > > news:20030227112129.03f3c20a.finn@finerdetails.com.au... > > > Okay, > > > I'm really starting to run out of ideas here. Any help > > would really > > > be handy. I'm looking after a small network, clients are > > running win2000 > > > SP3 and a Linux Server running samba, doing domain logins. > > Everything is > > > working fine apart from two machines (from ten). Probably > > once a week > > > one of them will fail to login in after a reboot or log > off. If any > > > user tries to login into the domain it comes up with the > error "The > > > system cannot log you on to the domain because the > systems computer > > > account in its primary domain is missing or the password on > > > that account is incorrect." Now the fix for this is simple > > enough. I log > > > into the local machine put the workstation back to a > > workgroup, reboot, > > > log in and re-add the computer to the domain and every ones > > happy ( for > > > a week or so). I've re-imaged the machines from one of the > > machines on > > > the network that doesn't exhibit the problem and sure > > enough, after a > > > week or so, down she goes. I've physically swapped one of > > the failing > > > machines out for a working one and shortly after the "new" > > machine is > > > failing again. There is no difference in the software or hardware > > > between any of the machines on the network, all part of the > > same roll > > > out, all on the same image. All of the machines except for > > one have done > > > had this problem, but only once, after I put them to > > workgroup then back > > > to domain they're happy and have been for six months, it's > > just these > > > two machines that keep doing it. The two failing machines > > are not near > > > each other but they are occasionally used by the same user. > > I've got the > > > logs if that will help people. > > > > > > Any help really apreciated, > > > Finn. > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > OutBound Mail Scanned by Mcafee Web Appliance. > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >OutBound Mail Scanned by Mcafee Web Appliance.