asked on

Logon Failure 529

I keep getting an 529 logon failure error in the security logs.

Reason: Unknown user name or bad password
User Name: Johns
Domain: HRC-SBS
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: TEMP-GX150
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.0.54
Source Port: 0

I suspected that it was a time sync problem with the affected PC so I replaced it with a temporary that has a "clean install" of XP pro w/SP2. This morning the log shows 25 new occurences.

Please help.

itcoza

And the error you get is alway from the same computer?

Found the following for you to look at.
http://support.microsoft.com/?kbid=890477
http://support.microsoft.com/default.aspx?scid=kb;en-us;811082

wmpierro

ASKER

Yes, always the same computer. I opened Symantec System Center and the computer does not have a domain prefix. Also, the user is able to logon to the domain normaly but when he tries to access his folders on the server he has to enter his username/password again like he is in a workgroup.

wmpierro

ASKER

I read the two knowledge base articles. 811082 seems to come the closest to the problem but I don't have the means to pay Microsoft for the solution. It looks like a known issue and a hotfix is avilable.

ASKER CERTIFIED SOLUTION

itcoza

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

wmpierro

ASKER

No the domain was not changed. I was actually considering deleting this user as a last resort and recreating him. Unfortunately this is the vice president of the company and he is always logged in. The original server was Windows 2000 advanced that someone before me loaded. Not a direct upgrade to SBS 2003 Premium. I had to bring in a temporary W2K standard server, promote it to a domain controller, transfer all the files and user directories over, load all the programs and have all the workstations resolve DNS and WINS to the temp server. I then took the original server down using dcpromo. It was supposed to transfer the GC to the temp server. The users and Domain policy transfered correctly. The next step was to "clean install" W2K standard on the original server, reverse the above moving everything back and demoting the temp server. All this becuase I couldn't upgrade from W2K advanced. The server was working perfectly and there were no problems in the error logs until reciently. I noticed that the latest Microsoft updates have been applied however.

wmpierro

ASKER

OK,
Problem solved. I deleted the user and re-created him. Everything seems to be working properly.