Problem with clients login in the Domain

[noobmoon]

I have a problem when i try to log on from my pc to AD in the domain.

When i boot the pc, and enter username, password and domain to which i want to log on, i need to wait 3-4 minutes, at Applying your personal settings... pop

up. After that i can log on, but when i check logs on my pc, at Application logs i fount thise two logs:

 

-----> LOG1

Event Type: Error

Event Source: Userenv

Event Category: None

Event ID: 1030

Date: 1/27/2011

Time: 10:05:29 AM

User: DOMAIN\user1

Computer: user1pc

Description:

Windows cannot query for the list of Group Policy objects.

A message that describes the reason for this was previously logged by the policy engine.

 

 

For more information, see Help and Support Center at Events and Errors Message Center: Basic Search.

 

----> LOG2

Event Type: Error

Event Source: Userenv

Event Category: None

Event ID: 1006

Date: 1/27/2011

Time: 10:05:29 AM

User: DOMAIN\user1

Computer: user1pc

Description:

Windows cannot bind to domain.com domain. (Local Error).

Group Policy processing aborted.

 

For more information,

see Help and Support Center at Events and Errors Message Center: Basic Search.

 

I log off and log on back several times, and its the same situation, 3-4 minutes waiting at log on, and always this two logs.

 

 

The DFS service is started at DC.

-------------

About sysvol:

-------------

I have the following path: c:\Windows\sysvol\sysvol\domain.com\

 

For the File permisions:

********************

C:\Windows\sysvol\

 

Folder is not shared.

 

Authenticated users and Server Operators have Read&Execute

Administrators, Creator Owners and System have Full Control

 

In the column Inherited From: they all have

 

In the column Apply To:

Creator Owner: Subfolders and Files only

Others: This foler, subfolders and files

 

Check box: Allow inheritable permissions from the parrent to propagate... is Unchecked

Check box: Replace permmision enttries on all child objects... is unchecked

 

************************

C:\Windows\sysvol\sysvol\

 

Folder is shared.

 

Administrators: Full control

Authenticated users: Read & Execute, List Folder Contents, Read

Creator Owner: Full control

SYSTEM: Full control

Server Operators: Read and Execute

Everyone: Read & Execute

Domain users: Read & Execute

 

 

 

In the column Inherited from for Domain users and Everyone is

For the rest is "inherited from C:\\Windows\sysvol\"

 

In the column Apply to

For Creator Owner: Subfolders and files only

For Everyone: This folder only

For all the rest: This folder, subfolders and files

 

Check box: Allow inheritable permissions from the parrent to propagate... is Unchecked for all

Check box: Replace permmision enttries on all child objects... is unchecked

*********************************

 

 

Any ideas, solutions?

[Nixphoe]

How many computers have this issue? Do any logon with out any problems?

You could try a gpupdate /force from the command line see if gives any new errors.

You could also try resetting the computer account on the domain. From a server you can type:

netdom reset [computername /domain domain.net /UserO [local user account on PC] /PasswordO *

If that doesn't work, check the event log on both the local PC and on the server

If it still doesn't work after that, I might taking it off the domain and readding it just as a test to see if that has any affect on it.

[noobmoon]

When i tried gpupdate/force, it generates the same two logs.

 

I reset computer account throught Active Directory users and computers, then add the computer name to my user, and again the same problem.

 

???

[2097]

login locally check IP addressing , DNS etc

 

also try pinging the workstation via the server

[noobmoon]

I solve the problem

 

Thax for the advices.

 

I log to DC and try to ping my pc, but i coulnd't, Requiest time out.

 

Then i remember that i have Firewall client and Comodo Firewall on my local pc.

I uninstall Comodo firewall, restart the pc, and now everything is ok.

It log on for less than 15-20 sec.

 

Thax a lot for the advices.