Hi there! I have a major problem, and I am really hoping that someone out there can help! Sorry about the length of the post - I just have loads of info!! :-( Network Info:- > Server running windows 2000 server as the only domain controller on the network > 3 other PCs running windows 2000 professional. > These PCs obtain their IP addresses from reservations in DHCP on the server. This works, and DNS on the server seems to be updated by DHCP correctly. (ie the PCs appear with their IP addresses listed in both the forward and backward lookup zones). Info:- I have just completed (2 days ago)formatting the server, and reinstalling windows 2000 server. I had to do this because it had started to crash randomly. Possibly due to software conflicts? Anyway... Having now reformatted, and setup the domain again, the other PCs on the network no longer function properly. Any user in the administrators group can logon to the 2k prof. PCs and receive their profiles correctly. Group policy also seems to transfer from server correctly. However, if a standard user logs on to either the prof. PCs or the server (I have altered the 'log on locally' permissions), they receive their desktop etc. from the server, but: a) no startup programs are started b) the backround on the desktop does not show, and active desktop refuses to start c) MSOutlook 2000 refuses to run d) Access 2000 runs incorrectly e) The 'logoff' command is missing from the start menu, and does not appear, even when set to from the taskbar properties. This also applies to the other options, such as 'Expand Control Panel' f) group policies (ie setting the homepage and proxy info in Internet Explorer etc.) do not activate This is really puzzling me. I suppose the only other info I have is from the error logs on the workstations. I'm not sure if all the logs are relevant: ------------- Event Type: Error Event Source: Winlogon Event Category: None Event ID: 1012 Date: 06/05/2001 Time: 10:15:15 User: TWS\Trisha Computer: STUDY Description: The automatic certificate enrollment subsystem could not access local resources needed for enrollment. Enrollment will not be performed. (0x80070005) Access is denied. ---------------- Event Type: Warning Event Source: EventSystem Event Category: Firing Agent Event ID: 4100 Date: 05/05/2001 Time: 17:02:39 User: N/A Computer: STUDY Description: The COM+ Event System failed to create an instance of the subscriber {6295DF2D-35EE-11D1-8707-00C04FD93327}. CoCreateInstanceEx returned HRESULT 800700CB. ------------ Event Type: Warning Event Source: BROWSER Event Category: None Event ID: 8021 Date: 06/05/2001 Time: 11:01:42 User: N/A Computer: KIRSTY Description: The browser was unable to retrieve a list of servers from the browser master \\SERVER on the network \Device\NetBT_Tcpip_{2C078E86-72E9-44B8-A976-80634EDF3CD4}. The data is the error code. Data: 0000: 40 00 00 00 @... ---------------- Event Type: Error Event Source: BROWSER Event Category: None Event ID: 8032 Date: 06/05/2001 Time: 11:03:42 User: N/A Computer: KIRSTY Description: The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{2C078E86-72E9-44B8-A976-80634EDF3CD4}. The backup browser is stopping. Data: 0000: 40 00 00 00 @... ---------- Event Type: Error Event Source: DCOM Event Category: None Event ID: 10001 Date: 06/05/2001 Time: 10:55:03 User: NT AUTHORITY\SYSTEM Computer: KIRSTY Description: Unable to start a DCOM Server: {6295DF2D-35EE-11D1-8707-00C04FD93327} as /. The error: "The system could not find the environment option that was entered. " Happened while starting this command: mobsync.exe -Embedding --------- Phew! Think thats about it. If you've taken the time to read all this, I thank you. Please let me know if you have any ideas. I am pretty clueless about this problem! Thanks in advance, Craig Luke.

Try creating a new user account to see if it can login as normal (nothing fancy, just standard user settings). You say the users get their profiles and settings from the server (roaming profiles?)? And that the group policy transfers correctly, then you say it doesn't transfer? Lost me there... If they aren't working it sounds like you've got user SID problems. If the newly created test user works you may have to go in and recreate the user accounts... It looks like you're users are running off cached account info and not the real stuff....

Yep - thats sorted it. I created a new user, and it worked. So, I deleted all of the users, and their profiles stored on the server and then created them all again. Problem solved! Thanks for your help, Craig.

I have almost the same problem. I'm running 2 W2k Domain Controllers. Created two user accounts called usr1 and usr2. Both the users share the same mandatory profile(is that allow?). I have no problem with user1 logging into the both the Domain Controller. With user2, it works fine with the second Domain Controller. But when I logon as user2 on the first Domain Controller, it keeps going into a loop in the desktop, where there is no way of doing anything accept bringing up the taskman and logoff. I had tried deleting the accounts and recreating but same thing happens. Any pointers will be appreciated. Thanks.