I installed adminpak on one of my client pc, but i cant open active directory users and computers and AD sites and services. Other administrative tools are working fine, the DHCP, DNS, Cluster admin are all functioning well, what could be the problem? it gave me this error message while trying to open it "FAILED TO OPEN SNAP IN". need help pls.

Report this post to a moderator

For those tools to work:

a) The client pc must be a member of an AD domain and be able to contact that DC.

b) The client must be able to resolve all domain records in DNS.

Report this post to a moderator

jeff my pc is member of the domain,actually i ca connect thru terminal service. how will i know if my client is resolving domain records on DNS? my DNS server i think is configured properly I tried to rename my computer and it was updated on the domain, please help members. thanks!!!

Report this post to a moderator

So the workstation you are trying to run 'AD Users and Computers' and 'AD Sites and Services' is a member of the domain.

Are you logged on the the workstation with an account that would have permissions to AD?

Report this post to a moderator

i logged with administrative privelege on the domain. what could be wrong jeff?

Report this post to a moderator

The client that you are running the admin tools on, cannot resolve the domain correctly, or the user does not have permissions. Do you get any specific errors?

I just searched the MS Knowledge base and there was not anything too specific, but if theres a problem with the time service or times between the client and DC, or if you are running NAT on the DC and ICS on the client, you may encounter problems such as these. If you can get me more specifics, error messages, troubleshoot DNS from the client with NSLookup, run NETDIAG on the DC, etc. I just need something more to search on.

Last edited by jeff_j_black on 03-27-03 at 12:47 PM

Report this post to a moderator

or is it compatibility issue because my client is running winxp pro and i installed win2k server adminpak, what do u think jeff?

Report this post to a moderator

I don't see anything specific in the knowledge base on this, but XP is fickle sometimes. Is the DNS server for your domain the first entry in the DNS Server list in the properties of the LAN connection on the XP client?

Report this post to a moderator

yup my the DNS is configured on my client properly, one more thing jeff, where's the domain security policy and the domain controller security policy located? i can't find it on the administrative tools.

Report this post to a moderator

Run MMC and add 'group policy' as a snap-in. When adding 'group policy' it will ask you what focus you want, this is where you can specify 'default domain'.

Report this post to a moderator