Cannot logon to a windows server

[alexia_net]

Hello,

I have a strange problem on a windows 2008 server. I cannot log in on it with any of the domain accounts, old or new.

Also, when i try to add add a domain user to the local administrators group, i can connect to the AD server in order to select which user to add to the group, but the user shows up in the list not only with the name, but with the id it has in the database as well (it think that this is what it is). A long strange name.

I have tried to take out the server from the domain and and it again. it did not work. I have created a new server and added it to the domain. It works ok.

What I can say about the server which has the problem is that it has 2 ip addresses. One for internal use and the other one dedicated to a web application.

However, i can connect to the server experiencing the problem, with any domain user, only if i check in the AD server, for that specific user i want to log in with the option USER MUST CHANGE PASSWORD AT NEXT LOGIN. This way i can log in with that user. But if i log out and try to log in again, it does not work. I do not use firewall on the servers, they have been deactivated.

The servers are not on the same network segment as the AD server. However, all other servers from the same network segment as the server experiencing the problem have no issue authenticating with the AD server. And some of them are using 2 ip addresses. The firewall does not seems to be an issue, but just to double check, which ports should be opened in this case for a successfull authentication with the AD?

The server experiencing the problem is a w2k8 R2 server. The AD server is also w2k8 R2.

Thank you and best regards.