RE: account being locked out shortly after login Events 675, 529, 539

Well, I have not figured it out yet, but I have narrowed it. The client
machine has a local instance of SQL Server 2005 installed for testing
purposes. I turned off all services related to it and the problem stopped.
I guess now all I have to do is turn one on at time until I find the culprit.
The confusing thing is that none of those services were running under the
client user account. I don't know why any of them would be sending login
request under the client user account.



"Jody" wrote:

Hello.

After shortly logging into the domain with a particular domain user account,
it begins to generate a flood of event 675 errors on the SBS 2003 server and
529 and 539 on the client machine (Windows XP). Eventually the account
threshold is passed and the account will lockout. This happened right after
I changed the password for the account. According to the logs the bad
username/password is coming from the client machine. I checked all the
services on the client machine and none of them are configured to run under
that user account. I even changed the password back to the original and the
problem continued.

Below are the log errors that I am receiving:

On Domain Controller:

Event 675

Pre-authentication failed:
User Name: xxxx
User ID: xxxxxxx\xxxxx
Service Name: krbtgt/xxxxx
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: xxx.xxx.xxx.xx


On local machine events:

Event 529

Logon Failure:
Reason: Unknown user name or bad password
User Name: XXXX
Domain: XXXXX
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: XXXXXXXXXX

Event 539

Logon Failure:
Reason: Account locked out
User Name: XXXX
Domain: XXXXX
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: XXXXXXXXXX

Thank you,



.

Relevant Pages

  • Re: sbs2003 and adding a user
    ... Please try to logon a new computer with an old good user account, ... the printer be installed correct? ... Extend to Client Computers node, ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Login Failures
    ... The only other thing I see is DCOM errors being generated by the client ... What is the user account "msmith"? ... please check the SBS Server and the client computer from ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Troubleshoot connecting client to SQL Server instance on a server
    ... I believed the test client user was succsessfully ... elsewhere on the network, etc.). ... type of "hybrid" user account resulted. ... the Windows user account used to access SQL Server must be ...
    (microsoft.public.access.adp.sqlserver)
  • RE: The COM+ Event System detected an inconsistency in its internal state
    ... client twice and get error 4614. ... Logon with another Domain User Account. ... Log on into Windows XP with the account which can log on successfully. ...
    (microsoft.public.windows.server.sbs)
  • RE: Authenticate via Active Directory from PC thats not joined th
    ... Create a local user account on the SQL server machine. ... Create a same local user account on the client machine. ...
    (microsoft.public.sqlserver.security)