Active Directory Windows R2 User Login Problem

[J4K]

Probably a straight forward answer to this but I'm having an issue with Active Directory within 2008 R2. I can setup new users perfectly fine however, the most recently added users haven't been able to logon on the first occasion from their machines.

 

There is no fault with the machines they are using as anyone else is able to logon to them and they are on the correct domain.

 

The new users have logon usernames like JoeB or BobT. All of our other active users have logins like this, however the recent additions are unable to logon. I changed the usernames to remove the last letter (e.g. BobT became Bob) and this solved the problem of them not being able to login for the first time. I just can't understand why when the majority of our users from the last few months and years all have logon usernames in this format and they don't have a problem.

 

I didn't set the system up - its a system which was setup a few years ago now so I don't know if there are any restrictions in place - but this still wouldn't explain why all our other current users have this format for their Windows usernames and now new users aren't able to login with them. Even stranger is Active Directory doesn't seem to have a problem with BobT or JoeB, but our machines just won't login with those details if they're a recently created user. No changes to the system have been made from what I'm aware.

 

I have previously added users using the format above but it's just been over the last couple of weeks, it doesn't seem to want to play ball.

 

Any ideas?

[FN-GM]

Do you have more than 1 domain controller? Are they replicating ok?

[J4K]

We only have 1 domain controller.

[hallb15]

Have you inspected the event log?

[J4K]

Yes. I've checked the logs and even tried replicating the issue real-time to see whether I can register an error or warning but it doesn't appear to identify anything. All current users are totally unaffected by the issue. Its only the username of new users which appears to be the problem. It will allow you to add any user into Active Directory but Windows will only allow that user to logon if it has a simple username like " steve " etc.

[Davit2005]

Are the users hitting space to wake up the screen then ending up with a space before their username? Not some thing to rule out.

 

Are the users getting any error messages at all?

Edited January 22, 2019 by Davit2005