I have upgraded more than 50 clients from XP to windows 7. When the user try to change the password or reset the password the message appeared the device attached to the system not functioning. When I add the domain name for example test.org\username user cannot reset the password, but if I enter the domain IP for example 1.1.1.1\user name the user can change the password. Server windows 2008 R2, Clients Windows 7 professional SP1.

Please run : Dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt http://www.arabitpro.com

Thank you for replaying NOTEPAD Result Command Line: "dcdiag.exe /v /c /d /e /s:dcname" Directory Server Diagnosis Performing initial setup: * Connecting to directory service on server dcname. Ldap search capabality attribute search failed on server dcname, return value = 81 The host dcname could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc. DcDiag: uncaught exception raised, continuing search When I run the commend, suddenly i Found error (Active directory Domain Services/ lightweight Directory services diagnostic utility has stopped working) Problem signature: Problem Event Name: APPCRASH Application Name: dcdiag.exe Application Version: 6.1.7601.17514 Application Timestamp: 4ce7a044 Fault Module Name: ntdll.dll Fault Module Version: 6.1.7601.17725 Fault Module Timestamp: 4ec4aa8e Exception Code: c0000005 Exception Offset: 000000000003074a OS Version: 6.1.7601.2.1.0.274.10 Locale ID: 1033 Additional Information 1: 6da3 Additional Information 2: 6da3e97bee351e4c7a46be449ea1982b Additional Information 3: 2320 Additional Information 4: 2320ea52da067b2f1394c8002beb7c34 Read our privacy statement online: http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409 If the online privacy statement is not available, please read our privacy statement offline: C:\Windows\system32\en-US\erofflps.txt

can you please run the below command from CMD netdom query fsmo http://www.arabitpro.com

Schema Master servername.domainname.org Domain naming master servername.domainname.org PDC servername.domainname.org RID pool manager servername.domainname.org infrustructure master servername.domainname.org the commend comopleted successfully.

Great!! now run this command Dcdiag /v /c /d /e /s:SERVERNAME >c:\dcdiag.txt http://www.arabitpro.com

The result words are more than 6000 words I cannot post it

post it on the skydrive i will download from therehttp://www.arabitpro.com

HAVE

I ahve uploaded the result

share the link to us to get it downloadedhttp://www.arabitpro.com

https://skydrive.live.com/redir?resid=DBC71BEBCCD02D96!169&authkey=!ADcihjjU9F7v3To

Did you get the file

according to the log it mentions you have 2 servers server1 and server 2 and presently server 1 is working Server 2 is either removed or network connected . If it doesn't exit then we might have to perform the metadata cleanup. http://www.petri.co.il/delete_failed_dcs_from_ad.htm http://www.arabitpro.com

server 2 is shut down, but we are using two servers server1 & server2 and both of them working fine.

If server 2 shutdown then why its shutdown and since how many days its shutdown ? any specific reason ? http://www.arabitpro.com

Just today for Maintenance, but even if the second server is up the problem still exist.

?

Can you please tranfer the roles to another server which is Server 2 and shutdown the server 1 and recheck the stitautuion ? http://www.arabitpro.com

I tried this step, but still the problem not solved.

Do you have any event IDS ? http://www.arabitpro.com

What IDS you asking for

When you are trying th change the password there should be an Event posted in the event viewer in the security.http://www.arabitpro.com

in the client PC or the Domain

Server side and one more question do you have any Third applications installed on the server by any chance ? Did you tried the scenario by disabling the firewall and the AV ? http://www.arabitpro.com

A Kerberos authentication ticket (TGT) was requested. Account Information: Account Name: dc2 Supplied Realm Name: Domain User ID: Domain\dc2 Service Information: Service Name: krbtgt Service ID: Domain\krbtgt Network Information: Client Address: ::ffff:10.77.152.10 Client Port: 60870 Additional Information: Ticket Options: 0x40800010 Result Code: 0x0 Ticket Encryption Type: 0x17 Pre-Authentication Type: 2 Certificate Information: Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: Certificate information is only provided if a certificate was used for pre-authentication.

I have shutdown the Firewall and no I dont have third party App installed. Still the problem is there

While changing the password you get the error isnt it ? can you please retry changing the Password and check the event id in the application and security both placeshttp://www.arabitpro.com

I got the same message from the security log's No log's generated in the application log's

Can you please share me the screen shot when you try to to change the password and join the domain ? http://www.arabitpro.com

Is this image what you asking for?

If I put the user in DOMAIN ADMIN group then I acn change the password, but if I remove it from the group I acnnot change the password.

I can change the password

Also if I put the password for the user from the domain he can access the computer without checking user must change password box.

There is no Direct upgrade from Windows Xp to Windows 7 how did u performed the task ? http://www.arabitpro.com

It's clean format from the DVD.

What setting are configured for following ? Interactive logon: Require Domain Controller authentication to unlock (Required setting Enabled) Domain member: Require strong (Windows 2000 or later) session key (Required setting Enabled) Interactive logon: Require smart card (Required setting Disabled if you do not use Smart Card)

all the setting are the same which you provide. still the problem exist.

Can you please un-join and re-join a sample machine to the domain and then try ?

Tried not working.

Please open a ticket from Microsoft CSS and seek there assistance or wait for the moderators to reply. I am not sure why is this behavior one thing I can suspect is might be AD database corruption which can be resolved by defraging the database. Note: Do not do anything unless you get guidance from Moderators.http://www.arabitpro.com

HSHSH, By any chance, are you running your DC on Citrix ? Looks like a bug in Citrix ! Thread from Citrix forum A device attached to the system is not functioning. http://forums.citrix.com/thread.jspa?threadID=273457

No citrix