Windows 2000 Domain Error

[JasonKurtz]

I'm trying to add a domain user to the local Power Users group on a 2k machine, with a 2k DC (it was migrated from NT if that matters).

This is the error message that I get:
error message

I've tried re-joining the domain, and even renaming the computer and re-joining the domain with no luck. Anyone have any ideas?

 

[Smilin]

Rejoining the domain sounds good. Be sure it gets OUT of the domain CLEANLY first. Remove the PC from the domain from within the PC itself...add it to the "Junk" workgroup instead. Reboot. Go into your domain tools (users and computers or server manager) and delete the PC. Sync your domain. Now go back in and re-add the PC to the domain from the PC itself, providing a login when req'd. Reboot. Try fooling with your users again.

If you try to rename and re-add a computer to a domain without deleting it first, the domain retains the SID of the PC with the wrong name and it will never authenticate anyone from the PC with the new name.