Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows 2000
    - Admin Tips
      - Administrator
        What To Check If A Single User Can't Log On To Domain?

Section(s): Administrator, Admin , Admin
Published on Jan 29, 2009.
Last Modified on Oct 16, 2008.
Last Modified by Nirmal Sharma.
Rated 3.5 out of 5 based on 2 votes.

This article explains the tips you can use to troubleshoot the problem for a user who can't log on to the domain.

Sometimes a single user might be not able to log on to domain. You can follow the checklist given below:

Make sure:

You can ping the domain controller from the user's computer.
There is no white space in the User's Home Profile in User's Property > Check it using the DSA.MSC.
The user computer is configured with the correct DNS Server to find the domain controller > Check in TCP/IP property of the user's computer.
The Computer Account in the domain for the user's computer is not missing > Check using the DSA.MSC
The Computer Account in the domain is not disabled > Check using the DSA.MSC
The Time between the domain controller and the client computer is synchronized > Check using Net Time command.
The Domain Controller can be found > Check environment variables and check "LOGONSERVER" value or execute Nltest /DsGetDc:domain to re-locate the domain controller for the user.

About Nirmal Sharma

Nirmal is a Microsoft MVP in Directory Services and working as a Technical Architect/Consultant. He has been involved in Microsoft Technologies since 1994 and followed the progression of Microsoft Operating Systems and software. He is specialized in Directory Services, Microsoft Clustering, SQL, MOM, Exchange and Citrix. In his spare time, he likes to help others and write "internal" technical articles, white papers and tips on various Microsoft technologies. You can contact him at nirmal_sharma@mvps.org.