Error 647 when dial in via RAS

[John Motley]

John ---

   

        I after I typed net accounts /sync three times, I received "The Command Completed successfully" only once after each attempt.

 

       In the event viewer, I received, "The full synchronization replication of the SAM database from the primary domain controller \\**** completed successfully."

Then "The full synchronization replication of the BUILTIN database from the primary domain controller \\**** completed successfully."

and finally, "The full synchronization replication of the LSA database from the primary domain controller \\**** completed successfully."

 

    I have created a second account for one of the people that stated they are getting 647 but he has not tried it yet.  The people that got the 647 last week are now able to connect with no problems without any action on my part other than to confirm that their accounts were not locked out.

 

    Why did the people last week get a 647 and can not access the server with no problems.

 

Thanks-- 

 

 

 

John Wu [MS] <joh...@microsoft.com> wrote in message news:9wpO0uGk$GA....@cpmsftngsa01.privatenews.microsoft.com...

> John,
>
> It seems like your SAM is corrupted or not synchronized. Can you verify on
> both your PDC and BDC, that a successful full schronization has takened
> place.
> At the command prompt of your BDC/RAS server,
>
> type the following command 3 times, without the quotes.
>
> "net accounts /sync"
>
> and you should see "The command completed successfully", 3 times after each
> attempt.
>
> Afterwards, check the event logs on both servers.
>
> 2nd thing to try:
>
> Create a new user account with dialin permissions, and test if this user
> can RAS in.
>
> Let us know what comes up after you've tried the above t-shooting steps.
>
> Thanks,
> John Wu
> Microsoft Technical Support
>
> -------------------------------------------------------
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from your issue. Please also include a copy of the
> original message when replying.
> -------------------------------------------------------
>
> To search Microsoft's Knowledge Base (KB), please visit
> http://support.microsoft.com/support/
> Need more information? Check out the WhitePaper vault:
> ftp://ftp.microsoft.com/bussys/winnt/winnt-docs/papers/
> To search Microsoft's web site, please visit
> http://search.microsoft.com
>
> --------------------
> Reply-To: "John Motley" <Jmo...@trginc.com>
> From: "John Motley" <Jmo...@trginc.com>
> References: <Ba4pxB4j$GA....@cpmsftngsa05.privatenews.microsoft.com>
> <GUdciD6j$GA....@cpmsftngsa01.privatenews.microsoft.com>
> Subject: Re: Error 647 when dial in via RAS
> Date: Fri, 17 Mar 2000 11:57:47 -0500
> Lines: 97
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Outlook Express 5.00.2314.1300
> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
> Message-ID: <e9hsW$Ck$GA....@cpmsftngsa05.privatenews.microsoft.com>
> Newsgroups: microsoft.private.directaccess.windowsnt
> NNTP-Posting-Host: fwall1.trginc.com 207.242.69.253
> Path:
> cpmsftngsa01.privatenews.microsoft.com!cpmsftngsa05.privatenews.microsoft.co
> m
> Xref: cpmsftngsa01.privatenews.microsoft.com
> microsoft.private.directaccess.windowsnt:23197
> X-Tomcat-NG: microsoft.private.directaccess.windowsnt
>
> Mr Wu-
>
>     Thanks for your reply to my post--  Based on your post here is a little
> more information.
>
>     The server "REMOTE" is a BDC and is successfully synchronizing with the
> SAM database.
>
>     I am able to open User Manager for Domains but not User Manager on that
> system.
>
>     Why do you think the RAS Server is incorrectly reporting the account is
> "Not active"
>
>     I have applied Service Pack 6a this morning just to be on the safe side,
> it was running SP 4.
>
>
> I look forward to your response ---
>
>
>
>
> John Wu [MS] <joh...@microsoft.com> wrote in message
> news:GUdciD6j$GA....@cpmsftngsa01.privatenews.microsoft.com...
> > Hi John,
> >
> > Thank you for your post to our newsgroup.
> >
> > This error message implies that your dialin user accounts are disabled.
> > This RAS server you have running, is it a workgroup, member server of a NT
> > Domain, or a PDC/BDC?
> > If it is a member server and is part of the NT Domain, you then have 2 SAM
> > databases.
> > Central Account and Local Accounts, they differ by the command you
> execute.
> >
> > User Manager - musrmgr.exe
> > User Manager for Domains -  usrmgr.exe
> >
> > Please verify which SAM you're using and configure accordingly.
> >
> > Thanks,
> > John Wu
> > Microsoft Technical Support
> >
> > -------------------------------------------------------
> > When responding to posts, please "Reply to Group" via
> > your newsreader so that others may learn and benefit
> > from your issue. Please also include a copy of the
> > original message when replying.
> > -------------------------------------------------------
> >
> > To search Microsoft's Knowledge Base (KB), please visit
> > http://support.microsoft.com/support/
> > Need more information? Check out the WhitePaper vault:
> > ftp://ftp.microsoft.com/bussys/winnt/winnt-docs/papers/
> > To search Microsoft's web site, please visit
> > http://search.microsoft.com
> > --------------------
> > Reply-To: "John Motley" <Jmo...@trginc.com>
> > From: "John Motley" <Jmo...@trginc.com>
> > Subject: Error 647 when dial in via RAS
> > Date: Thu, 16 Mar 2000 15:02:12 -0500
> > Lines: 13
> > X-Priority: 3
> > X-MSMail-Priority: Normal
> > X-Newsreader: Microsoft Outlook Express 5.00.2314.1300
> > X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
> > Message-ID: <Ba4pxB4j$GA....@cpmsftngsa05.privatenews.microsoft.com>
> > Newsgroups: microsoft.private.directaccess.windowsnt
> > NNTP-Posting-Host: fwall1.trginc.com 207.242.69.253
> > Path:
> >
> cpmsftngsa01.privatenews.microsoft.com!cpmsftngsa05.privatenews.microsoft.co
> > m
> > Xref: cpmsftngsa01.privatenews.microsoft.com
> > microsoft.private.directaccess.windowsnt:23088
> > X-Tomcat-NG: microsoft.private.directaccess.windowsnt
> >
> >     Recently some of my 100 remote clients are receiving "Error 647" your
> > account is not active.  I then check the user Account via the User Manager
> > and they are not locked out and they are granted dial-in access.
> >
> >     All with the exception of 1 are then able to access the network by
> > dialing in 30-50 minutes later with no problems.
> >
> > Any Clues, suggestions for trouble-shooting --
> >
> > John Motley
> > Raleigh, NC--
> >
> >
> >
> >
>
>
>