I have also seen this occasionally.  For our environment it appears to be
caused by replication latency.  We have four DC's in one site and by
definition the maximum convergence time is 10 minutes.  What appears to
happen is that the deletion/reset/etc.. of the computer account occurs on
one DC and then when the PC reboots it may change which DC in the site that
it is communicating with.  If that new DC doesn't have the
deletion/reset/etc replicated then the "access denied" error occurs. You may
want to experiment around with waiting 2 - 10 minutes or whatever your
theoretical maximum replication interval is before attempting to rejoin.
For our OU admins, waiting a couple of minutes seems to solve this problem. 

-Stuart

-----Original Message-----
From: Stuart, Cory G. [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 10, 2003 10:40 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Rejoining Windows 2000 Systems to a Domain (2000 Native
Mode)

Hi All,
        Sometimes when I try to rejoin a 2000 system after it has been
removed from AD, I get an access denied error.  I renamed the PC and
rebooted.  When I try to join it, I get the same error.  This sometimes also
happens when attempting to move the system from one domain to another within
the same forest.  Any help is really appreciated!

Thanks,

Cory

-----------------------------------
Cory G. Stuart
Network Administrator
Nuclear Engineering Division
Argonne National Laboratory
----------------------------------- 
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to