Solved

Logon Failure 529

Posted on 2006-06-27
6
597 Views
Last Modified: 2012-06-21
I keep getting an 529 logon failure error in the security logs.
 
  Reason: Unknown user name or bad password
  User Name: Johns
  Domain: HRC-SBS
  Logon Type: 3
  Logon Process: NtLmSsp
  Authentication Package: NTLM
  Workstation Name: TEMP-GX150
  Caller User Name: -
  Caller Domain: -
  Caller Logon ID: -
  Caller Process ID: -
  Transited Services: -
  Source Network Address: 192.168.0.54
  Source Port: 0

I suspected that it was a time sync problem with the affected PC so I replaced it with a temporary that has a "clean install" of XP pro w/SP2. This morning the log shows 25 new occurences.

Please help.
0
Comment
Question by:wmpierro
  • 4
  • 2
6 Comments
 
LVL 13

Expert Comment

by:itcoza
ID: 16992063
And the error you get is alway from the same computer?

Found the following for you to look at.
http://support.microsoft.com/?kbid=890477
http://support.microsoft.com/default.aspx?scid=kb;en-us;811082
0
 
LVL 1

Author Comment

by:wmpierro
ID: 16992498
Yes, always the same computer. I opened Symantec System Center and the computer does not have a domain prefix. Also, the user is able to logon to the domain normaly but when he tries to access his folders on the server he has to enter his username/password again like he is in a workgroup.
0
 
LVL 1

Author Comment

by:wmpierro
ID: 16993577
I read the two knowledge base articles. 811082 seems to come the closest to the problem but I don't have the means to pay Microsoft for the solution. It looks like a known issue and a hotfix is avilable.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 13

Accepted Solution

by:
itcoza earned 500 total points
ID: 16993663
This actually sounds like a failure on the GC.  Remove the user account from all the groups he belongs to and add him to them again.
Then let's see what happens.  It seems as if the domain is unable to read his Universal group membership and then he does not get authenticated correctly.  Just a though... give it a go... at least this will not take time....  

--- You only need to do this is the user account has the same problem on other computers ---

I have also had the same type of problem that stemmed from the user profile having a corruption due to a domain change.  Sometimes user profiles are damaged when imported when a user is moved (with the profile) to a new domain. (this was not the case was it?)
0
 
LVL 1

Author Comment

by:wmpierro
ID: 16993936
No the domain was not changed. I was actually considering deleting this user as a last resort and recreating him. Unfortunately this is the vice president of the company and he is always logged in. The original server was Windows 2000 advanced that someone before me loaded. Not a direct upgrade to SBS 2003 Premium. I had to bring in a temporary W2K standard server, promote it to a domain controller, transfer all the files and user directories over, load all the programs and have all the workstations resolve DNS and WINS to the temp server. I then took the original server down using dcpromo. It was supposed to transfer the GC to the temp server. The users and Domain policy transfered correctly. The next step was to "clean install" W2K standard on the original server, reverse the above moving everything back and demoting the temp server. All this becuase I couldn't upgrade from W2K advanced. The server was working perfectly and there were no problems in the error logs until reciently. I noticed that the latest Microsoft updates have been applied however.
0
 
LVL 1

Author Comment

by:wmpierro
ID: 16994926
OK,
Problem solved. I deleted the user and re-created him. Everything seems to be working properly.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This video discusses moving either the default database or any database to a new volume.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now