Re: Logon Error - Event ID 533

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

MageMaster

Some possibilities for you to consider:
http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Security&phase=1


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

MageMaster wrote:
WinXP SP3, System is standalone, not connected to a network

This is the text of the event:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 533
Date: 6/3/2009
Time: 08:14:05
User: NT AUTHORITY\SYSTEM
Computer: IS00002

Description:
Logon Failure:
Reason: User not allowed to logon at this computer
User Name: dummy
Domain: (deleted)
Logon Type: 2
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: (deleted)

--------------------------------------------------
The "deleted" text is for security purposes.

1) "Dummy" is member of "Users" Group

2) Local Security Settings, Log on locally = Users, Administrators

Note all Security Settings are DoD mandated.

Even if I create a new account like "Dummy" I get this error.

ONLY if I make a user (ANY user) a member of Administrators can they
logon.

I found the MS TeckNet article:
http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=533&EvtSrc=Security&LCID=1033

Also found many hits using Google.

Problem, none provided a fix or even a hint that applies in this case
(Users in Log on locally).

So, WHAT is the fix?

.

Relevant Pages

  • Re: Internet Explorer and Outlook Express problems after standby mode
    ... > Event Type: Failure Audit ... > Event Source: Security ... > Event Category: Account Logon ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: KDC Event ID 7 and Wins startup errors.
    ... I was wondering if the reboot might have been in conjunction with patch installs - seems like sometimes installing a lot of updates or whatever can add a little more activity to the next restart, and that something like that might have caused the errors you saw. ... > Event Type: Information ... > Event Source: USER32 ... > Logon Failure: ...
    (microsoft.public.windows.server.sbs)
  • Re: KDC Event ID 7 and Wins startup errors.
    ... Scheduled reboot was done to ensure that no services/tasks are failing ... Event Type: Information ... Logon Failure: ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)
  • Re: NTbackup fails after running fine for 1 years
    ... Event Source: Userenv ... see Help and Support Center at ... Event Type: Information ... Successful Logon: ...
    (microsoft.public.dotnet.general)
  • Need to resolve Event 4136
    ... Event Type: Failure Audit ... Logon Failure: ... Workstation Name: <systemname> ... Caller User Name: $ ...
    (microsoft.public.inetserver.indexserver)