Can't rejoin domain

surga

I recently had to rebuild my DC, but i still use the same DNS. But the result is my client computer can't rejoin domain and they can't logon to network. Myserver is Win 2000 server , my client use OS Win XP and Win 2000 Pro.

When i used nslookup.

C:\>nslookup
*** Can't find server name for address "myserver": Non-existent domain

In event Viewer

---

Event Source: NETLOGON
Event ID: 5513
Computer: myserver
Description:
The computer Client1 tried to connect to the server "myserver" using
the trust relationship established by the domain. However, the computer
lost the correct security identifier (SID) when the domain was reconfigured.
Reestablish the trust relationship.

Is there away to solve this? Thx.

Shorty

When you rebuilt your AD, did you:

1. Restore your system state from a backup.
2. Keep the DC with the same name & static IP.
3. Keep the Active Directory forest & domain the same?

Check your client PC is not already a member of a domain that no longer exists or was not restored.

Unjoin the PC from the domain back to workgroup mode and rejoin it

surga

When i rebuild my AD:
1. i start from zero.
2. I keep my DC, DNS, IP with the same config.
3. Also keep the same forest.

Is there away without make my client back to workgroup and rejoin the domain?

Shorty

Nope. You didn't restore the previous AD State which holds all the unique references to machines, logins, accounts, security descriptors.. and so on ...

If you restarted from scratch, you effectively nuked your domain.

surga

Pls let me know how to make back up for account, login, & security?

Thx for the advise.

Necropolis

This covers the backup and restore procedure http://www.windowsecurity.com/articles/Securing_Windows_2000_Active_Directory_Part_3__Backup_and_Restoration.html

But everything else is nuked. You have no user or machine accounts anymore. You will have to re-add every machine one your network one by one and then re-create your user accounts.