RE: cannot log on to user account following password change

From: Crina Li (v-crinal_at_online.microsoft.com)
Date: 03/18/05 

Date: Fri, 18 Mar 2005 10:35:28 GMT

Hi Frank,

Thanks for your reply.

I am glad to hear the problem is resolved. Currently since the issue has
disappeared, we may not able to find the root cause. However, based on my
experience, the issue may occur by the time delay of the Active Directory
replication.

If you have any another questions about the problem , please do not
hesitate to let me know.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: cannot log on to user account following password change
| thread-index: AcUq4XJb2+qKwvbIQG6w7HrwKw4YWw==
| X-WBNR-Posting-Host: 83.148.135.202
| From: =?Utf-8?B?RnJhbmsgU2FsdGVy?= <FrankSalter@discussions.microsoft.com>
| References: <4D99BEE3-2AFB-4460-BD67-13B693E9B9FB@microsoft.com>
<O7gmWitKFHA.1140@TK2MSFTNGXA02.phx.gbl>
| Subject: RE: cannot log on to user account following password change
| Date: Thu, 17 Mar 2005 03:07:02 -0800
| Lines: 154
| Message-ID: <14F7A6A2-304E-4F4C-A46D-C18EDF36A292@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:154937
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Crina,
|
| Thanks for coming back to me. In point of fact I have just resolved the
| issue. A few months back. I changed the username on the account in
question
| on the sbs box. This was because the lady in question wanted to use an xp
| home box with an existing local profile in conjunction with the sbs
account.
| I counselled her to upgrade to xp pro, but at that time she refused.
|
| So, a local profile on the xp home box called Fiona Bavester had a
username
| of John Williams. her email address was fiona@......
|
| I created a domain user account on the then brand new sbs box in the name
| Fiona Bavester with username and email alias = fiona and then changed the
| username in active directory users and computers to John Williams. In
this
| way she was able to access her folders on the server although outlook
asked
| for a username and password every time she opened it. All this because
she
| was insistent on keeping her existing profile and I was unable to change
the
| username on the xp home box.
|
| After a few weeks she changed her mind and asked me to upgrade all the
| workstations to xp pro. She was still insisting on keeping her old
profile.
| Once I upgraded her machine, I went into her local account and changed
the
| username from John Williams to Fiona. I then went back to active
directory
| users and changed her username back to fiona.
|
| Outlook stopped asking for passwords and all was well until yesterday
when
| she contacted me to request some password changes because a laptop with
| network passwords on it and also a vpn had been stolen.
|
| When I changed the password on her account I believe it pulled the
username
| "John Williams" up from somewhere. What finally put me on to this was
| searching the directory from her machine whilst logged on as domain
admin. I
| had used control userpasswords2 to search the directory for her account
to
| give her rights to use that machine. (not very logical I know - but I was
| getting desperate) When I pulled her up from the directory her username
was
| showing as "John Williams" and this despite the fact that according to
the
| account details on the server her username was "Fiona" and also despite
the
| fact that I could view her email on OWA using username=fiona and the new
| password.
|
| I logged off from her workstation (where I had been logged on as domain
| admin), changed her username on the sbs box back to John Williams and
| attempted to log on to the domain (at her workstation) as username "John
| Williams" using the new password and it logged on fine. The name at the
top
| of the xp start menu was Fiona Bavester! I then logged off from her
| workstation, changed her username on the sbs box back to fiona and
attempted
| to log on to the domain at her workstation as username=fiona and the new
| password. This time it logged on fine and the problem was resolved. She
was
| then able to use her old local profile on the xp pro box with username
and
| password matching the domain account.
|
| I guess the changed username had not replicated properly through all
areas
| of active directory. It seems strange though, that the account worked
fine in
| every respect for several months until I reset the password on the sbs
box
| when it pulled the old username back for network logon but failed to show
| this in the user account dialog on the server and also used the new
username
| for OWA!
|
| Very Strange!
|
| If she'd taken my advice in the first place and upgraded to xp pro when I
| installed the sbs box none of this would have happened. Why won't people
| listen?
|
| Still - the good news is I get paid for resolving the issue....
|
| Any thoughts?
|
| Frank.
|
| "Crina Li (MSFT)" wrote:
|
| > Hi Frank,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > Based on the information you have provided, I have performed the
research
| > and we may try the steps in the following article:
| >
| > 818088 You cannot log on to your computer after you change the domain
user
| > account password
| > http://support.microsoft.com/default.aspx?scid=kb;en-us;818088
| >
| > After performing the above steps, if it does not work, please help me
to
| > get the following information:
| >
| > 1. Do you have any other addition DC besides the SBS? It is because
that
| > the multiple DCs need more time to synchronize the AD information.
| > 2. How you reset the domain users' password? What utility did you use?
| > 3. Gather the Netlogon log:
| >
| > 1) Schedule a down time for SBS.
| > 2) Open a Command Prompt window on SBS.
| > 3) Run "net stop netlogon" (without the quotation marks).
| > 4) Open the folder %WinDir%\Debug, rename the file netlogon.log
| > 5) Run "net start netlogon" (without the quotation marks).
| > 6) On a client, try logging on by using the problematic user account to
| > reproduce the issue.
| > 7) Paste the content in Netlogon.log to the newsgroup.
| >
| > 4. On the SBS, are there any errors in the System, Application,
Directory
| > Service or Security log? If so, please paste them in the newsgroup.
| >
| > I'm looking forward to your reply. Thank you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: cannot log on to user account following password change
| > | | Subject: cannot log on to user account following password change
| > | Date: Wed, 16 Mar 2005 06:31:08 -0800
| > | | Newsgroups: microsoft.public.windows.server.sbs
| > | | This morning I reset the password on a number of user accounts on
an
| > sbs2003
| > | box. The password changed successfully on all accounts but one.
Whilst
| > the
| > | sbs box reported a succesful change I cannot log on to the account
from
| > any
| > | of the machines on the domain. I am invited to check username, domain
and
| > | re-enter password.
| > |
| > | I joined the account to the administrators group and tried using it
to
| > log
| > | on to the server locally - no go.
| > |
| > | Interestingly if I try outlook web access I can authenticate using
the
| > new
| > | password and view the email.
| > |
| > | I have tried resetting the password again to a new password, I have
tried
| > | changing the username and I have tried forcing the user to change
| > password at
| > | next logon - nothing works.
| > |
| > | What is going on?
| > |
| > | Help please....
| > |
| > |
| > |
| >
| >
|

Relevant Pages

  • Re: Security Question
    ... Administrator account. ... aligned with the stars for someone to get a valid username from an AD ... Les Connor [SBS Community Member - SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • RE: cannot log on to user account following password change
    ... I changed the username on the account in ... > | on the sbs box. ... > | username from John Williams to Fiona. ...
    (microsoft.public.windows.server.sbs)
  • Re: logon failure
    ... MSSQLServer service after you change the username of administrator account. ... username for the SQL Server startup service account or the SQL Server Agent ... Microsoft SQL Server service account on the SQL Server host computer. ...
    (microsoft.public.windows.server.sbs)
  • RE: cannot log on to user account following password change
    ... home box with an existing local profile in conjunction with the sbs account. ... a local profile on the xp home box called Fiona Bavester had a username ...
    (microsoft.public.windows.server.sbs)
  • DirectoryServices error: Authentication mechanism is unknown: Solution
    ... passing username and password credentials, ... if you are running under a system account ... rather than an account that belongs to the domain you're connecting to. ... packet sniffing I was doing trying to find what happens when you bind. ...
    (microsoft.public.dotnet.general)