Re: Authentication failures

Yes another user successfully logged in to the machine. I think you're on to
something on the corrupt profile. To delete profile is this approach ok?
1. Copy C:\documents and settings\user\my documents
2. Copy C:\documents and settings\user\desktop
3. Delete profile
4. User logs in to machine
5 copy my documents and desktop back to C:\documents and settings\user\.
--
Mike Bannister


"AllenM" wrote:

One more test. Can you or anyone else log onto the domain from the
workstation? If yes I would be leaning torwards a corrupt profile. Delete
the old one, make sure you svae her desktop and documents and recreate a new
one next logon. Delete the profile from right click My
Computer/Properties/Advance/User Profiles Settings.


"Mike Bannister" <mbannist@xxxxxxxxx (donotspam)> wrote in message
news:B7249267-0CCA-4692-BB9D-F82A33E281E5@xxxxxxxxxxxxxxxx
The user account is not locked out. The user is able to logon to other
workstations in the domain. No the user has not recently changed password
and
lastly the user never logs in on any other workstation so simultaneous
multiple client sessions can be ruled out also.
--
Mike Bannister


"AllenM" wrote:

When you checked was the user account locked out? Can they log onto
another
machine? Has the user recently change their password? Perhaps they were
still logged in elswhere when they did?


"Mike Bannister" <mbannist@xxxxxxxxx (donotspam)> wrote in message
news:34730CED-376D-4DAD-98BA-EFAFEE538045@xxxxxxxxxxxxxxxx
I wish it were that obvious and easy. Of course I have checked the user
account. The user logs in every day. The bulk of the events are
occuring
during off hours when the user is not present?


--
Mike Bannister


"Mike Bannister" wrote:

I am running SBS 2003 Sp1 with all XP pro clients. One of the clients
has
suddenly started causing security event 529 as well as a netlogon
failure
event 5722. I have tried deleting machine from domain and rejoining
and
it
did not solve issueThe logs shows the following:

Source Event ID Last Occurrence Total
Occurrences
Security 529 2/3/2006 5:23 AM 26 *
Logon Failure:
Reason: Unknown user name or bad password
User Name: JeanHinsley
Domain: BCCIPDC
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: BCCIJHINSLEY
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.0.33
Source Port: 3391


Source Event ID Last Occurrence Total Occurrences
NETLOGON 5722 2/3/2006 4:25 AM 6 *

The session setup from the computer BCCIJHINSLEY failed to
authenticate.
The
name(s) of the account(s) referenced in the security database is
BCCIJHINSLEY$. The following error occurred: Access is denied.

Thanks in advance for your help...

--
Mike Bannister






.

Relevant Pages

  • Re: Help with a configuration of profiles
    ... I assume that you are talking about the user's TS-specific profile, ... There are many ways to define a logon script for all users on a TS. ... Note that if you start the frontend in the environment tab of the ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: 1 Notebook unable to log in
    ... The domain controller no longer recognizes that laptop since the trust has ... back on they will get a brand new user profile. ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: File ownership been changed
    ... These "MachineName\UserName" folders often/usually appear when user profile corruption is encountered. ... When a user tries to logon if the Security Account Manager recognizes the user name and password at logon and if it has no valid reason to refuse the logon, it allows the user to logon with a new profile, it creates a new profile folder from the Default User profile and names it as you see. ... As to how to do a "wholesale" change of all security attributes from "Fred" to "David" the only easy way to do that is with the SubInACL tool. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Event viewer errors, roaming profile problems XPsp2, W2k domai
    ... startup and logon" via group policy and it worked, the roaming ... profile now works if the user logs in right away. ... errors pertain to Net Logon Service and W32Time. ... execute at logon but not startup. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Cannot logon to "(local machine)"
    ... My Documents folder within the user's profile. ... either by code in a logon script or a Group Policy. ... the profile are not made part of the network copy of the Roaming Profile. ... specified for individual user accounts, via Group Policy or a logon script. ...
    (microsoft.public.win2000.group_policy)