Problem Accessing File server

hi,
cannot access shared folder our server, prompts server not accessible , target accoount name incorrect.

file server domain controller. i've checked event logs , find these error logs:
    source: userenv
    event id:1053
    descriprion: windows cannot determine user or comp. name. group pol. aborted.

    source: dns
    event id: 4000
    description: dns server unable open active directory.

tried open group policy , got error: domain controller group policy operation not available.


kindly please.. thanks

hi,

as can access shared folders via ip, kerberos related issue.

please follow steps trouble shoot issue.

step 1: check time skew between domain controllers, see knowledge base article http://support.microsoft.com/?id=257187

setp 2: check domain controller registry confirm if crashonauditfail [reg_dword] = 0x2
if crashonauditfail = 0x2 perform following steps
a. type regedit start, , click run.
b. expand hkey_local_machine\system\currentcontrolset\control\lsa
c. right-click crashonauditfail, select modify
d. under value data:, select 2 , change value 0
e. reboot domain controller
verify useraccountcontrol , kerberos trust
1) ensure kerberos key distribution center (kdc) service started.
2) ensure trust computer delegation check box selected on general tab of domain controller properties dialog box in active directory users , computers.
3) using adsiedit or ldp (both included in windows 2000 support tools), confirm useraccountcontrol attribute set 532480. check this, perform following steps
a. type adsiedit.msc start, , click run.
b. expand domain nc container.
c. expand object below, i.e. dc=contoso, dc=com
d. expand ou=domain controllers
e. right-click cn=<domain_controller>, , select properties
f. under select property view, select useraccountcontrol , verify value 532480
note:check value each failing dc account on local copy of ad every partner dc. example if dc-a , dc-b failing replication, check above on dc-a’s copy of ad , dc-b’s copy of ad.

step 3: modify kdc related parameters
1. if problem exists between domain controllers different domains, add following registry value upstream replication partner
hkey_local_machine\system\currentcontrolset\services\ntds\parameters
value name:  replicator allow spn fallback
value type:  reg_dword
value data:  1
2. run following command upstream partner:
c:\>repadmin /add cn=configuration,dc=<domain controller>,dc=<com> <root dc name> <fully qualified name of child domain controller>
3. remove replicator allow spn fallback registry value after testing replication.

Windows Server  >  Windows Server General Forum