Re: Security Event ID 533 - user can't access OWA or RWW



Yes, she is.

Yes, her computer and one other (not the server).
"Cris Hanna [SBS - MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in message news:eW8I9quhJHA.4408@xxxxxxxxxxxxxxxxxxxxxxx
Is the user a member of the Remote Web Workplace security group?

Have you set up ADUC to limit which computers can be logged on to?

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
Owner, CPU Services, Belleville, IL
A Microsoft Registered Partner
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"Mike in Nebraska" <Mike_in_Nebraska@xxxxxxxxxxxxxxxx> wrote in message news:480972A3-7841-414D-A65B-8B3F7A4D0FCA@xxxxxxxxxxxxxxxx
SBS 2003 Premium, current with patches and updates. User running Vista
Business.
=================
New employee, setup in SBS with Add User Wizard. Unable to login to OWA or
RWW either internally or externally - also tried on other computers.
Checked her account in ADUC and found nothing wrong compared to other users.
Keep getting this error in server security log:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 533
Date: 1/30/2009
Time: 6:30:57 AM
User: NT AUTHORITY\SYSTEM
Computer: <computername>
Description:
Logon Failure:
Reason: User not allowed to logon at this computer
User Name: jessica
Domain: <computername>
Logon Type: 3
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: <computername>
Caller User Name: IUSR_<computername>
Caller Domain: <domainname>
Caller Logon ID: (0x0,0x3B5E3)
Caller Process ID: 6008 <this is w3wp.exe, called by user NETWORK
SERVICE>
Transited Services: -
Source Network Address: -
Source Port: -

I've tried (twice) backing up her email and docs, then deleting her account
(rebooted server the second time), before adding her back in -- same result.
I can create a new account with a different name and it does NOT have this
problem. I know the quick fix is to create a new account for her with a
different name and marry it up with her docs and email account, but I'd
kinda like to fix this and KNOW what went wrong.

Any ideas out there?

TIA,

--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a conservation non-profit (501 (c)(3)) organization
Wood River, NE


Relevant Pages

  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here ... admin account to be able to Login so I can control it from the DC. ... A domain user can by default logon to any domain computer, except Domain controllers. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here I am ... administrator account. ... account to be able to Login so I can control it from the DC. ... A Server has websites already hosted on it in a Workgroup and now I join it ...
    (microsoft.public.windows.server.active_directory)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: Unknown User Logon attempt
    ... Security Troubleshooting and Support ... This pattern seems to be that of a hacker or process attempting to access our mail server in order to install a virus or some type of malicious software. ... Logon Failure: ... than likely something is using that user account. ...
    (microsoft.public.security)
  • Re: write with cURL
    ... you can stop making excuses. ... Part of Jerrys' security is not letting you on his server... ... up an account for you, process the billing, etc. ...
    (alt.php)

Loading