Domain user cannot print

[jonno112]

I have this one user in the domain (Server2003 - XP) who is getting the error Access denied, unable to connect.

This message comes up when she double clicks the printer in the printers section, i deleted and re-added still the same, she can get to the shares no problem.

In the last week i reset her password and now this is happening. I took her of the domain and placed her back on.

I tried other printers and there all the same everyone else is fine and can print.

The Security on the printer is standard 'everyone" is print Allow

Any suggestions.

[mahesh]

can u try another user on same pc it may be ur pc problem

[jonno112]

Hi Mahesh

I tried the user on another pc and she works there.

I tried another user logging on to the problem system and they can print.

Any ideas?

I have tried google and they really dont give an answer to the question.

[ua549]

Depending on what you did when you were changing her account, a new account with a different identifier may have been created.

Have you tried re-adding her current account to the resource shares on the server in question.

[jonno112]

I'm not sure i get you, i know her account is allright cause she can login on other systems and print without any problems.

And other users can logon to her system and print.

Do you mean re-create her AD account? Or add her to the printer share?

[ua549]

If one deletes an account with the name X and recreates the account with the same name, X, the account identifier will be different. The account identifier is the basis for security, not the name on the account. If the account identifier changed, it is not valid where the previous account identifier was explicitly used.

That would explain why the account is good one place and not another.

[jonno112]

Okay this is weird yesterday morning she logged on and it worked.

I still don't really have an answer sorry googlers.

Thanks UA549

All i did was change her password, this can be done on a daily basis and it's never happened before to anyone else.

Next time it happens should i delete her account?

[ua549]

Never delete an account. You will lose that UID forever. It is better to disable an account. When a replacement person starts the same account can be updated with a new user name and password. That way you don't have to set up permissions required for the position from scratch. All you need do is update permissions for changes in the job function.

In a work environment I associate a domain account with a job position, not a person.

[jonno112]

There is only one job function there teachers and to delete there UID. Why would that matter in relation to a domain they can log on with any id they choose as long as they know the password.

I do have a default user for when a new teacher comes in saves the assigning of permissions.

It still does not explain what happened with the printers.

One thing is for sure as soon as another person logged on and could use the printers, she logged on next and could also use the printers.

As i said its weird.

There is wireless and cat 6 to this section if the cable failed could it have had something to do with the wireless? Signal may not have been strong enough I might test it and see what happens.

[ua549]

ACL's are lists of UID's. The username and password do not matter. When a user successfully logs in they are known by their UID, a long hex string.