Re: Problem Logging in With a Particular User's Account

Tech-Archive recommends: Fix windows errors by optimizing your registry

Brandy,

Once again, thanks for your continued help with this issue. Let me see if I
can go ahead and break this down so we can examine it better. I now have two
notebooks, each with problems. Forget about when I mentioned that I
reinstalled XP on one because that was a long time ago. Lets look at the
specific issues I am getting on each laptop. Before I describe each
specifically, I need to mention that to try to solve this problem, I
performed the following steps on each:

1. Removed from the domain by changing to a workgroup.
2. Deleted the problem computer accounts from the domain using active
directory.
3. Created two new computer accounts (with different names)
4. Joined each back to the domain using SBSs connect computer website.

Now that I have described that, I will look at each.

Laptop one (the original one I started the thread about).
The user can now log in, but it seems to take forever each time. The user
can also get his email through Outlook. He can also get shared files from
the server. He can ping the server by name as well as by IP. It would seem
as though everything is now okay with this machine except I receive the
following error messages (on the machine itself, there are no corresponding
messages on the server):

Type: Error
User: NT Authority\System
Source: Serene
Category: None
EventID: 1053
Description:
Windows cannot determine the user or computer name. (An internal error
occurred. ). Group Policy processing aborted.

Type: Error
User: NT Authority\System
Source: Serene
Category: None
EventID: 1054
Description:
Windows cannot obtain the domain controller name for your computer network.
(A socket operation was attempted to an unreachable host. ). Group Policy
processing aborted.

Type: Error
User: N/A
Source: AutoEnrollment
Category: None
EventID: 15
Description:
Automatic certificate enrollment for local system failed to contact the
active directory (0x80072751). A socket operation was attempted to an
unreachable host.
Enrollment will not be performed.

Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40960
Description:
The Security System detected an attempted downgrade attack for server
ldap/hi-server.hospitality.international.local. The failure code from
authentication protocol Kerberos was "There are currently no logon servers
available to service the logon request.
(0xc000005e)".

Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40961
Description:
The Security System could not establish a secured connection with the server
ldap/hi-server.hospitality.international.local. No authentication protocol
was available.

The IP configuration when I run IPConfig /all follows:

Windows IP Configuration

Host Name . . . . . . . . . . . . : CURTIS
Primary Dns Suffix . . . . . . . : hospitality.international.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hospitality.international.local
hospitality.international.local
international.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : hospitality.international.local
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
Ethernet NIC
Physical Address. . . . . . . . . : 00-02-3F-D7-24-B3
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.10.10.19
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.10.1
DHCP Server . . . . . . . . . . . : 10.10.10.1
DNS Servers . . . . . . . . . . . : 10.10.10.1
Primary WINS Server . . . . . . . : 10.10.10.1
Lease Obtained. . . . . . . . . . : Thursday, February 16, 2006
5:33:45AM
Lease Expires . . . . . . . . . . : Friday, February 24, 2006
5:33:45 AM

In regards to gpupdate, I receive the following error in the logs when I
try:

Type: Error
User: NT Authority\System
Source: Serene
Category: None
EventID: 1053
Description:
Windows cannot determine the user or computer name. (An internal error
occurred). Group policy processing aborted.

If there is any other relevant information I can provide about this machine,
please let me know.

Laptop 2 (the new one I am having problems with using another user I have
created)

The user can log in without receiving any pop-up messages. The user can also
retrieve files on shared folders. The user cannot, though, get his email
through Outlook. When I try to set up a mail account, I receive the
following message:

Microsoft Office Outlook: The action cannot be completed. The connection to
the Microsoft Exchange Server is unavailable. Outlook must be online or
connected to complete this action.

The events logged when I try to connect to exchange resemble the ones below
(the 40960 and 40961), but the connection they cannot establish is to the
server exchangeAB/HI-SERVER.

The PCs event logs reveal the following (no corresponding events are logged
on the server)

Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40960
Description:
The Security System detected an attempted downgrade attack for server
exchangeRFR/HI-SERVER. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to service the
logon request.
(0xc000005e)".

Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40961
Description:
The Security System could not establish a secured connection with the server
exchangeRFR/HI-SERVER. No authentication protocol was
available.hospitality.international.local. No authentication protocol was
available.

Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40960
Description:
The Security System detected an attempted downgrade attack for server
cifs/COMPLIANCEADMIN. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to service the
logon request.
(0xc000005e)".

Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40961
Description:
The Security System could not establish a secured connection with the server
cifs/COMPLIANCEADMIN. No authentication protocol was available.

These last two cifs messages will appear multiple times. They are referring
to other computers (not servers on the network). I only have one server, and
it is called HI-SERVER.

The ipconfig is the following:

Windows IP Configuration

Host Name . . . . . . . . . . . . : TYLER
Primary Dns Suffix . . . . . . . : hospitality.international.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hospitality.international.local
hospitality.international.local
international.local

Ethernet adapter Wireless Network Connection:

Connection-specific DNS Suffix . : hospitality.international.local
Description . . . . . . . . . . . : Atheros AR5001X+ Wireless
Network Adapter
Physical Address. . . . . . . . . : 00-90-96-6D-88-09
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.10.10.27
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.10.1
DHCP Server . . . . . . . . . . . : 10.10.10.1
DNS Servers . . . . . . . . . . . : 10.10.10.1
Primary WINS Server . . . . . . . : 10.10.10.1
Lease Obtained. . . . . . . . . . : Thursday, February 16, 2006
6:15:02AM
Lease Expires . . . . . . . . . . : Friday, February 24, 2006
6:15:02 AM

In regards, to gpupdate, the message I get is:

Refreshing Policy...
User Policy Refresh has completed
Computer Policy Refresh has completed

I get no events in the logs to say it didn't.

I am kind of at a loss about what could possibly be the problem here. Are
there any other questions I can answer for you. Thanks again.

Chris

""Brandy Nee [MSFT]"" <v-branee@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:RNNoswhMGHA.768@xxxxxxxxxxxxxxxxxxxxxxxx
Hello Chris,

Thank you for posting back!

I understand that you no longer experience the error message when logging
in to domain through the problematic client workstation. However, you
notice that Event ID 1060 and 1030 are recorded. This issue also occurs on
another newly setup laptop. If I have misunderstood your concern, please
let me know.

In order to supplement your description, I need your help to gather the
following information:

1. Just to double confirm, you mentioned "the problem is happening on
another notebook that I just reinstalled XP Pro on", I need to know:

a. Do you mean you used the problematic client account to log on the
notebook and then the issue occurs?
b. How did you reinstall the XP Pro?

2. Where did you find the Event ID 1060 and 1030, on the problematic
workstation or SBS Server?

3. On the server, run "eventvwr" (without quotation marks), check whether
there are any errors. If yes, double click it, click the Copy button and
paste the full content to the Newsgroup.

Please perform same steps on the problematic client workstation.

Please do not edit or delete any result. We need the full error
information
(e.g description, Event Source, etc) to perform accurate research.

4. On the problematic client workstation, open a command window, type
"ipconfig /all" (without quotation marks), copy and paste the full content
to the Newsgroup.

Please perform the same steps on the SBS Server.

5. On the problematic client workstation, can you ping SBS Server by name
and IP address?

6. Please help me to capture following two screen shots and send them to
the Newsgroup:

a. You mentioned "I cannot get any network resources such as email or
(sometimes) network folders". Please capture a screen shot with the error
message when you fail to access the network folders.
b. You also mentioned "I also cannot run gpupdate when I am logged in".
Please capture a screen shot for the error message.

Please take your time to perform the steps and I am looking forward to
hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.



--------------------
From: "Chris Guimbellot" <cguimbellot@xxxxxxxxxxxxxxxxxxxxxxxxxx>
References: <O9K1AceHGHA.1728@xxxxxxxxxxxxxxxxxxxx>
<d6kHOB#HGHA.3680@xxxxxxxxxxxxxxxxxxxxx>
<ORLqYI$KGHA.3052@xxxxxxxxxxxxxxxxxxxx>
<TZPNx$HLGHA.128@xxxxxxxxxxxxxxxxxxxxx>
<#Bqa4GOLGHA.3276@xxxxxxxxxxxxxxxxxxxx>
<OwDz41VLGHA.768@xxxxxxxxxxxxxxxxxxxxx>
<u12lVJdLGHA.604@xxxxxxxxxxxxxxxxxxxx>
<oMrMk6iLGHA.608@xxxxxxxxxxxxxxxxxxxxx>
<uuSJ0CSMGHA.1132@xxxxxxxxxxxxxxxxxxxx>
<iHX0c5UMGHA.608@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Problem Logging in With a Particular User's Account
Date: Wed, 15 Feb 2006 00:01:15 -0500
Lines: 105
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
X-RFC2646: Format=Flowed; Original
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
Message-ID: <#7wobzeMGHA.1088@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: c-71-56-117-159.hsd1.ga.comcast.net 71.56.117.159
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:244557
X-Tomcat-NG: microsoft.public.windows.server.sbs

Brandy,

Thanks for the continued help. I thought I would mention that now, I am no
longer getting the messages that pop up while logging on. It seems now I
am
getting messages userenv 1006 and userenv 1030 upon logging in. Once
logged
in, I cannot get any network resources such as email or (sometimes)
network
folders. I also cannot run gpupdate when I am logged in. When I try, the
1006 and 1030 errors are generated again. Also, the problem is happening
on
another notebook that I just reinstalled XP Pro on. It now seems to me
that
it is more of a server problem. Thought I would let you know in case you
have any ideas. Let me know what the next step should be. Thanks,

Chris




.

Quantcast