We have a small network of XP workstations connected on a small network (5
workstations max) to a Windows Server 2003 Dell. One workstation cannot
access shared drives for a LONG TIME on his workstation nor can he access My
Documents on the C: drive. The My Documents folder is not redirected to a
Network Drive.

When I look at the security for the My Documents folder, I see a
S-1-333-444... (something like that)

When I click on the line that says S-1-333-444 it, after a few seconds,
changes to his login and then all is OK. This happens every day.

What is the problem and how do I solve it.

Have you removed the user from the permissions and added them back?

DDS
"Peter Ellis" <PeterEllis@discussions.microsoft.com> wrote in message
news:1A9BD746-0785-43A4-BD7D-4C7BD98DF9BE@microsoft.com...
> We have a small network of XP workstations connected on a small network (5
> workstations max) to a Windows Server 2003 Dell. One workstation cannot
> access shared drives for a LONG TIME on his workstation nor can he access
> My
> Documents on the C: drive. The My Documents folder is not redirected to a
> Network Drive.
>
> When I look at the security for the My Documents folder, I see a
> S-1-333-444... (something like that)
>
> When I click on the line that says S-1-333-444 it, after a few seconds,
> changes to his login and then all is OK. This happens every day.
>
> What is the problem and how do I solve it.

Peter Ellis wrote:
> We have a small network of XP workstations connected on a small
> network (5 workstations max) to a Windows Server 2003 Dell. One
> workstation cannot access shared drives for a LONG TIME on his
> workstation nor can he access My Documents on the C: drive. The My
> Documents folder is not redirected to a Network Drive.
>
> When I look at the security for the My Documents folder, I see a
> S-1-333-444... (something like that)
>
> When I click on the line that says S-1-333-444 it, after a few
> seconds, changes to his login and then all is OK. This happens every
> day.
>
> What is the problem and how do I solve it.

Assuming this workstation is a member of an Active Directory domain, which
in most cases the Domain Controller runs DNS and is the only DNS that
supports the AD domain, does the workstation use the DC for its only DNS
server?
All members of an AD domain should use only the DNS server that hosts, or
supports the AD domain. A common misconception is that you can use your
ISP's DNS as an alternate DNS, this is untrue; and because the way the DNS
client on a Windows machine will stick to and continue to use the last DNS
server that answered a query for the DNS client, only DNS servers that
support the AD domain should be used in TCP/IP properties, in any position.


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

No. The PC was originally at our main office under one domain and was
transferred down to another office to the new domain. I did change the IP
addresses on Network Connections to point to the new server.

Another PC I rebuilt there from scratch at that office has the same delayed
response - but why c:\My Documents?

There is a logon that has DENY perms for the relevant shared folders in the
AD for Server 2003. The office worker in question in not logging on with
that login



"Danny Sanders" wrote:

> Have you removed the user from the permissions and added them back?
>
> DDS
> "Peter Ellis" <PeterEllis@discussions.microsoft.com> wrote in message
> news:1A9BD746-0785-43A4-BD7D-4C7BD98DF9BE@microsoft.com...
> > We have a small network of XP workstations connected on a small network (5
> > workstations max) to a Windows Server 2003 Dell. One workstation cannot
> > access shared drives for a LONG TIME on his workstation nor can he access
> > My
> > Documents on the C: drive. The My Documents folder is not redirected to a
> > Network Drive.
> >
> > When I look at the security for the My Documents folder, I see a
> > S-1-333-444... (something like that)
> >
> > When I click on the line that says S-1-333-444 it, after a few seconds,
> > changes to his login and then all is OK. This happens every day.
> >
> > What is the problem and how do I solve it.
>
>
>

The workstation only points to the Domain Controller.



"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Peter Ellis wrote:
> > We have a small network of XP workstations connected on a small
> > network (5 workstations max) to a Windows Server 2003 Dell. One
> > workstation cannot access shared drives for a LONG TIME on his
> > workstation nor can he access My Documents on the C: drive. The My
> > Documents folder is not redirected to a Network Drive.
> >
> > When I look at the security for the My Documents folder, I see a
> > S-1-333-444... (something like that)
> >
> > When I click on the line that says S-1-333-444 it, after a few
> > seconds, changes to his login and then all is OK. This happens every
> > day.
> >
> > What is the problem and how do I solve it.
>
> Assuming this workstation is a member of an Active Directory domain, which
> in most cases the Domain Controller runs DNS and is the only DNS that
> supports the AD domain, does the workstation use the DC for its only DNS
> server?
> All members of an AD domain should use only the DNS server that hosts, or
> supports the AD domain. A common misconception is that you can use your
> ISP's DNS as an alternate DNS, this is untrue; and because the way the DNS
> client on a Windows machine will stick to and continue to use the last DNS
> server that answered a query for the DNS client, only DNS servers that
> support the AD domain should be used in TCP/IP properties, in any position.
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>
>

In news:1ED2BD92-0DA3-4877-A699-71516C595A2A@microsoft.com,
Peter Ellis <PeterEllis@discussions.microsoft.com> stated, which I commented
on below:
> No. The PC was originally at our main office under one domain and was
> transferred down to another office to the new domain. I did change
> the IP addresses on Network Connections to point to the new server.
>
> Another PC I rebuilt there from scratch at that office has the same
> delayed response - but why c:\My Documents?
>
> There is a logon that has DENY perms for the relevant shared folders
> in the AD for Server 2003. The office worker in question in not
> logging on with that login

Is there any significant errors in the Event logs of the DCs or the client
machines?

--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...