I just worked in a new company with a DC and some domain users. I created a new domain account in the DC and tried to log in from a win2k pro computer, which was already in the domain. The error message was "The system can not let you log in, because the domain xxx is not avaliable". But the old domain account can. I re-installed a new computer and joined it into the domain. Then I found my new account worked. Next, I pull out the net cable from a old computer, then I found it still can log on the domain!!! what's happening? Also, I found they've used their accounts for long time, and they can not log in the domain from other computers. I checked the policy and account properties, no log on to configuration was found... So...I'm confusing and need someone's help and explain... Thanks Nothing comes with nothing

If you pulled the cable out and can still log on to the Domain, I have a feeling it's actually logging in locally. If you able to browse the domain, then there must be some other connection to the domain. Either wireless or perhaps thru a dial up account. Larry

Thanks Larry I think I didn't explain very clearly. After I pulled out the cable, the computer still could log on to the domain, but it couldn't browse the network. There are no other connection except the network cable. So...I found if I disjoined this computer from the domain and then joined the computer to the domain again, my new account worked. All other domain account could log on from this computer,too. I really want to know why... Nothing comes with nothing

The issue you describe sounds like perhaps this machine was cloned and the sid was not changed or at some point it lost the secure channel to the server. By leaving the domain and rejoining you re-established the secure connection.

There was no clone or sid change !!! what happened was that, whoever was in charge before you, made each of your users local members of his or her computer, using there domain user names. That is why the users can log on to their computers fine, but cannot browse the network. All you have to do is make each computer rejoin your new domain, and then create user accounts for the new domain and assign them properly. Then if you add each user to their machine locally, when the network is not available they will still be able to get into their computer. If your confused let me know !!! Bh the playground legend

Thanks for your help...and hope you can continue. That was no change or sid change..You're right, gubi4. But, that was no new domain, either. I just wanted to use my new account in the existed domain. What I'm curious is, the administrator can log on any computer, but the normal accounts can't. Fox instance, computer A has used account A for 2 years, and computer B has used account B for 2 years. They haven't used other accounts. now computer A want to use account B, but it gets a error message, "the domain is not available." Both of these two accounts don't have any limit for the log on location. Why? Nothing comes with nothing

They login locally not on the domain. But with the credentials they got they can still browse the network cuz they do exist on the domain. If you delete or rename the profile you will see they cant login on there old computer also and get the same msg as when they would login to another computer. This is nothing strange but normal. If you remove there local accounts they cant login also