Re: User Account Lockout

To tired, I totally missunderstod some/all (LOL) of this thread, had to
re-read It alot of times to see my own crazy respons..
:-p

--
Henrik Arenblad, MCP SBS,
http://support.microsoft.com/kb/q555375 http://www.google.com/
Windows Small Business Server 2003 Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/07fe109b-1421-4052-acc2-d2898afc0d951033.mspx?mfr=true


"Henrik" <hear01@xxxxxxxxxxx> wrote in message
news:uMnS3GiUIHA.476@xxxxxxxxxxxxxxxxxxxxxxx
Hi Jason,

I was thinking some about the printer..
You have the option to set rights and permissions on a printer object as
well as on files and folders.

*Have you set any specific permissions on your printer?
*The script, what type Is it? Bat or Vbs or ?
*The script that runs, Is It a local script or a server script? Is it the
default logon script?
*Have you the right permissions on the folder were the script Is located?
*Is the script the only script or Is It a script that calls a second one?
*If a second script, wich one Is connecting/mapping the printer object?
*What printer are we talking about? Model and drivers? Not all printers
are suited to be used and shared on a printer server.

Im not very good at scripting so any help from others Is appreciated...

--
Henrik Arenblad, MCP SBS,
http://support.microsoft.com/kb/q555375 http://www.google.com/
Windows Small Business Server 2003 Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/07fe109b-1421-4052-acc2-d2898afc0d951033.mspx?mfr=true


"Jason" <Jason@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B7F4D7DA-8331-4F62-B61D-71FB9A32A773@xxxxxxxxxxxxxxxx
Adter disabling IPSec serice on the workstation and changing the RPC
service
to run as local system account, the problem remains.

My last resort will be to re-image the machine but I'd like to get to the
botom of this in case it happens inthe future.

"Henrik" wrote:

Ok, lets try and check the following.

1. Disable the IPSec Service on the workstation.
2. Change the RPC Service to run as 'Local System Account'.

If these settings Is already as suggested I dont for know have anything
further.

--
Henrik Arenblad, MCP SBS,
http://support.microsoft.com/kb/q555375 http://www.google.com/
Windows Small Business Server 2003 Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/07fe109b-1421-4052-acc2-d2898afc0d951033.mspx?mfr=true


"Jason" <Jason@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C7A0B3F3-EC4C-4482-A532-68C80F2F8EFF@xxxxxxxxxxxxxxxx
He had several manually mapped drives which I have now removed. The
issue
still remains. I dont know if they were using old credentials. I would
have
thought that they used the same credentials given at login?

The error I see when I logon refers to the printer logon scrip which
is
applied to every user. It simply maps the printers.

Error: Permission Denied
Code: 0800A0046.

Something is using old credentials, I just dont know what.

"Henrik" wrote:

Does the user have a manually mapped (manually or by script) drive
using
the
old credentials?

--
Henrik Arenblad, MCP SBS,
http://support.microsoft.com/kb/q555375 http://www.google.com/
Windows Small Business Server 2003 Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/07fe109b-1421-4052-acc2-d2898afc0d951033.mspx?mfr=true


"Jason" <Jason@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9710507A-F265-4BEA-BAC7-5D5CFA2E5E0E@xxxxxxxxxxxxxxxx
Greetings

I have a rather unusual problem.

After changing his password, one user when he logs on to the domain
locks
out his account. The following also occurs.

My Admin logs show this entry, total Occurrences 1,555.

Pre-authentication failed:
User Name: userA
User ID: DOMAIN\userA
Service Name: krbtgt/DOMAIN
Pre-Authentication Type: 0x2
Failure Code: 0x12
Client Address: 192.168.1.5

After entering his credentials, an error message regarding my
printer
log
on
script pops up saying 'access denied'.

He cannot browse server folders or do anything on the domain.

When I log into his account from another workstation, there are no
problems
at all.

I have so far

*removed the computer form the client computers in Server Manager.

*renamed the workstation.

The user is working away fin on a spare machine but I cannot seem
to
pinpoint the issue his own machine. Any advice or help would be
appreciated.

Thanks.











.

Relevant Pages

  • RE: synchronizing domain user Local cached credentials with domain
    ... Would you mind emailing me your script? ... windows taskbar bubble which would indicate that their password needs to be ... locally cached credentials are out of sync with domain credentials. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: synchronizing domain user Local cached credentials with domain
    ... windows taskbar bubble which would indicate that their password needs to be ... No Error, Script Ends. ... locally cached credentials are out of sync with domain credentials. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: "Run as" utility
    ... > credentials on Win2K/XP without the user having to enter a password. ... it compiled the script into a .exe file so the user ... an account in the Administrators group for your machine would then be a ... Windows is only secure regarding its ...
    (microsoft.public.win2000.security)
  • Re: NTBackup - requested media failed to mount
    ... > I have checked the RSM plus deleted the tape unit and all associated ... > The problem is that Small Business Server runs a script when it sets up ... > backup jobs and this script refers to AIT8MM1 but the RSM only refers to ...
    (microsoft.public.windows.server.sbs)
  • Help! Convert Incoming Mail to Custom Format
    ... I have Microsoft Small Business Server 2003 with Exchange. ... Preferably I would like to write a script that can do this for all users automatically so they see the custom form. ...
    (microsoft.public.office.developer.outlook.forms)