Mark, This may be a bit bizarre, but are you certain that when you restored the DCs that the passwords of the accounts went with them? I'm not certain why this might have occurred, but remember that there is an account restriction that would apply that REQUIRES a password for all principals. And, at the moment I'm not sure that it applies to the Administrator account but I would think that it does. You are using the administrator acount and a password, yes?
So, what I'd suggest is to go in as the Admin, and reset the password of a another user and have that user try and log in. Let us know how that works. -rtk -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Wednesday, May 18, 2005 6:15 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Unable to log you on because if an account restriction Dear all, I have just performed a disaster recovery of our Windows Server 2003 forest and I am now receiving the message "Unable to log you on because if an account restriction" when I try to logon with any account apart from the administrator account. I have a two domain forest X.com and child.x.com When the DC's were first restored and were not communicating with Each other I could logon using any account, now that the DC's are talking and replicating I cannot, now only the administrator account works. I have ensured the GPO's are set correctly, I can see nothing obvious in the event logs so now it's time to ask my peers if they have experienced any such issues. I have restored many forests in DR situations and never experienced this issue beforer. Thanks in advance. Mark List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/