Hey guys I am having a re-occuring issue that is basically doing my head in.
I basically have around 70 sites connecting back into a main network via a
private network. The main network consists of aroun 9 AD servers that handle
the file and print, logons etc.
The 70 sites have between 1 and 3 computers and these computers each have 2
accounts, a standard and a supervisor account. The standard account only is
only a member of a couple of groups, domains users and an internet group,
while the supervisor account is a member of those groups and 2-3 others.
The problem I am facing is that innermitantly, so far every couple of
months, we recieve a complaint that a supervisor account can no longer log
on. The account is hanging at the loading personal settings section for
around 40 minutes. The actual account can still log on at a major site (not
connected via the private network) with no issues and if we remove its extra
group memberships will work at the remote site as well. I have tried deleting
and re-creating the local profile, checked dns settings, refreshed group
policies, rejoined the domain and it is always the same. The only fix that
has worked so far is to totally re-create the account in active directory,
that is delete the old one, propogate the changes and re-create it.
Any thoughts?