Re: Security Event ID 533 - user can't access OWA or RWW



I don't think you can restrict the login to the SBS since you're logging in
and authenticating there for OWA and RWW.

"Mike in Nebraska" <Mike_in_Nebraska@xxxxxxxxxxxxxxxx> wrote in message
news:9A6CE2CE-9ABA-4184-9296-EF721234EB37@xxxxxxxxxxxxxxxx
Yes, she is.

Yes, her computer and one other (not the server).
"Cris Hanna [SBS - MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in
message news:eW8I9quhJHA.4408@xxxxxxxxxxxxxxxxxxxxxxx
Is the user a member of the Remote Web Workplace security group?

Have you set up ADUC to limit which computers can be logged on to?

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
Owner, CPU Services, Belleville, IL
A Microsoft Registered Partner
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"Mike in Nebraska" <Mike_in_Nebraska@xxxxxxxxxxxxxxxx> wrote in message
news:480972A3-7841-414D-A65B-8B3F7A4D0FCA@xxxxxxxxxxxxxxxx
SBS 2003 Premium, current with patches and updates. User running Vista
Business.
=================
New employee, setup in SBS with Add User Wizard. Unable to login to OWA or
RWW either internally or externally - also tried on other computers.
Checked her account in ADUC and found nothing wrong compared to other users.
Keep getting this error in server security log:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 533
Date: 1/30/2009
Time: 6:30:57 AM
User: NT AUTHORITY\SYSTEM
Computer: <computername>
Description:
Logon Failure:
Reason: User not allowed to logon at this computer
User Name: jessica
Domain: <computername>
Logon Type: 3
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: <computername>
Caller User Name: IUSR_<computername>
Caller Domain: <domainname>
Caller Logon ID: (0x0,0x3B5E3)
Caller Process ID: 6008 <this is w3wp.exe, called by user NETWORK
SERVICE>
Transited Services: -
Source Network Address: -
Source Port: -

I've tried (twice) backing up her email and docs, then deleting her account
(rebooted server the second time), before adding her back in -- same result.
I can create a new account with a different name and it does NOT have this
problem. I know the quick fix is to create a new account for her with a
different name and marry it up with her docs and email account, but I'd
kinda like to fix this and KNOW what went wrong.

Any ideas out there?

TIA,

--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a conservation non-profit (501 (c)(3)) organization
Wood River, NE


.



Relevant Pages

  • RE: Problems with 529 Events
    ... attempting to logon on some services on the SBS server. ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here ... admin account to be able to Login so I can control it from the DC. ... A domain user can by default logon to any domain computer, except Domain controllers. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here I am ... administrator account. ... account to be able to Login so I can control it from the DC. ... A Server has websites already hosted on it in a Workgroup and now I join it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... "Meinolf Weber" wrote: ... They however cannot logon directly to the physical DC machine. ... NOT an admin account to be able to Login so I can control it from ... A Server has websites already hosted on it in a Workgroup and now ...
    (microsoft.public.windows.server.active_directory)
  • RE: Getting alot of these emails
    ... Thank you for posting in the SBS newsgroup. ... this issue can occur if your SBS 2003 server is ... Disable the Guest account in your SBS 2003 server and enable Stronger ... Microsoft is providing this information as a convenience to you. ...
    (microsoft.public.windows.server.sbs)