ctx_cpsvcuser - Event ID 529 Unknown user name or bad password

I am getting the  following error on sbs 2003 server reports in the security log
ctx_cpsvcuser - Event ID 529 Unknown user name or bad password
Logon Failure:
       Reason:      Unknown user name or bad password
       User Name:      ctx_cpsvcuser
       Domain:      BLGTS1
       Logon Type:      3
       Logon Process:      NtLmSsp
       Authentication Package:      NTLM
       Workstation Name:      BLGTS1
       Caller User Name:      -
       Caller Domain:      -
       Caller Logon ID:      -
       Caller Process ID:      -
       Transited Services:      -
       Source Network Address:
       Source Port:      0

BLGTS1 is our citrix terminal server
Does anyone know why this is happening? The Ctx_cpsvuser does reside as a local account on the terminal server. Everything in TS seems to be working ok. Any ideas to clean this up would be appreciated....
Who is Participating?
Daniel BorgerConnect With a Mentor Senior Citrix Engineer- CCEECommented:
This will rebuild the account and assign the correct permission.
Carl WebsterConnect With a Mentor Commented:
Do exactly what dborger suggests or change the ctx_cpsvuser account to "local system".  That is what the account used to be but Citrix wisely changed it for security reasons.  Only change the account if the article dborger suggests does not work.
williamstechnologygroupAuthor Commented:
sounds good, I am waiting until my next after hours downtime to attempt this. I just don't want to break anything in Citrix!
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

williamstechnologygroupAuthor Commented:
I will be attempting this soon, just had some other major work to do and did not want to do this as well. Is there any risk of "breaking" citrix if I do this? Or is the risk pretty low?
Carl WebsterCommented:
There is ultra low risk.
williamstechnologygroupAuthor Commented:
Just an update, will be doing this during next downtime hopefully this week
williamstechnologygroupAuthor Commented:
The problem mysteriously went away- no more event logs for this citrix user account. I will award points and document the fix in case it comes back.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.