I have an existing Windows 2000 SBS domain with primarily XP and Vista machines, which work correctly. I recently added two 7 Pro machines and am having an odd security issue. The computers join correctly to the domain. I can see them in the AD and in DNS on the DC. When I look at Groups in Local Users and Groups on the machines, any domain-based group or user is showing up as their SID instead of their name. The same happens when looking at the User Profiles in the System Properties. Users show up as account unknown. I can login as an end user to the computer but many things are not working such as printing, accessing control panel, etc. It acts as if the logged in account does not have rights to certain features on the machine. The accounts work correctly on Win XP and Vista machines in the office. Any thoughts on why this isn't working? I have tried turning off Windows Firewall and have unjoined/rejoined the computer to the domain.

Hi, This issue can occur by corrupted user profile, I suggest you refer to the following articles to backup data, remove the corrupted profile and recreate a new profile. copying "account unknown" user profile to good user account. Note: The third-party product discussed here is manufactured by a company that is independent of Microsoft. We make no warranty, implied or otherwise, regarding this product's performance or reliability. A temporary profile is loaded after you log on to a Windows Vista-based system Thanks,Novak