laptop loses domain settings

[chrbb]

Two new laptops added to domain no problem all settings applied from roaming profiles. 2 days later teacher can't logon to domain, neither can I so readd laptop to domain, check all dns configurations, firewalls etc. Next week laptop can't logon again.
The teachers in question do have the facility to logon locally to install printers and seem to get confused on which logon to use. Is it possible that their local profiles aren't unloading properly so they then can't logon to the domain. I've installed the MS hive cleaner and changed the autoenrollment setting in the local policy editor.
Any ideas?

[beeswax]

are you/they logging on wirelessly?

[NetworkGeezer]

Obvious question but it has to be asked:

Is the log onto box set to the domain name or '<computer names>this computer[' for local accounts. You may need to click on options button to see thurd bi

Anyway their logons would be cached wether or not they were connected wirelessly.

[Ric_]

The teachers in question do have the facility to logon locally to install printers and seem to get confused on which logon to use.

To me this would be a clue! Perhaps they have been adding dodgy hardware or have 'tweaked' the network settings (particularly DNS server address).

[NetworkGeezer]

@chrbb if you attach the laptops to the network

Can you ping them or see them on the browser list of another machine?
Do netstat on a domain controller and see if they are trying to connect to Active Directory.

Can you login as the builtin adminsitrator. Check event log say. What do you see when you do

ipconfig /all

Do they use any personal firewall with outbound blocking. If basic one then it might not distinguish between domain and non domain setups.

[chrbb]

when laptops are added to the domain they are visible in active directory, I've checked all dns settings. When the laptop refuses to logon to network and the only way to access the laptop is logon on locally ipconfig/all shows exactly the same settings as if it was logged onto network, ip address from range, dns server etc.
Checked all poss 'simple' reasons for not logging on ie to network not this computer, number lock off etc.
Only firewall is xp tried it with on and off no difference.

[beeswax]

this was posted a few months back (I can't locate it now) but quite a few people found that using the manufacturers drivers for the wireless nic caused problems. the wireless nic drivers wouldn't load until until windows had loaded. catch 22. it was solved by letting windows configure the wireless card. it may well be that I'm barking up the wrong tree here.

[NetworkGeezer]

Can you log on with a domain account that does have a roaming profile?

Try using different computer names when adding machines to domain or reset existing accounts before rejoining with current machine accounts.

[djm968]

this was posted a few months back (I can't locate it now) but quite a few people found that using the manufacturers drivers for the wireless nic caused problems. the wireless nic drivers wouldn't load until until windows had loaded. catch 22. it was solved by letting windows configure the wireless card. it may well be that I'm barking up the wrong tree here.

I have seen this before with wireless domain logons and with Intel pro wireless it can be resolved by configuring a persistant and pre-logon connect administrator profile. This kicks the wireless in before you log-on

Make sure you have the latest Intel drivers.

There is also an SP2 regkey that forces logon to wait for GPO over wireless which I found really useful.

[chrbb]

It's a wired network, no wireless. We had three of these laptops at the same time it's only happening to two of them.
Because it's a school I only work in twice a week and then only for a few hours a time it's sometimes difficult to get to the root of the problem, at my other school I'm there four consecuative days it's easier to get access to teacher's laptops.
After I've rejoined it to the network it works fine I test it for various logons, no problem, hand it back to teacher next time I see them can't logon again. They're not using the laptop on the internet at home so no change of ip settings there.

[Geoff]

did you sysprep them?

[chrbb]

no, added to domain, installed sophos, installed selected software, logged the users on a desktop pc first to set up their roaming profile then logged them on to laptop to check proxy settings and printers ok.

[Geoff]

So they aren't machines that have been imaged?

[chrbb]

no straight off the shelf,

[chrbb]

Popped into school today to check server's event viewer, couldn't do it yesterday, group of teachers having stroppy meeting in server room!
The error shown is event 5722 the session setup failed to authenticate etc. Access is denied.