[Last Call] Learn how to a build a cloud-first strategyRegister Now


ctx_cpsvcuser - Event ID 529 Unknown user name or bad password

Posted on 2009-12-24
Medium Priority
Last Modified: 2012-05-08
I am getting the  following error on sbs 2003 server reports in the security log
ctx_cpsvcuser - Event ID 529 Unknown user name or bad password
Logon Failure:
       Reason:      Unknown user name or bad password
       User Name:      ctx_cpsvcuser
       Domain:      BLGTS1
       Logon Type:      3
       Logon Process:      NtLmSsp
       Authentication Package:      NTLM
       Workstation Name:      BLGTS1
       Caller User Name:      -
       Caller Domain:      -
       Caller Logon ID:      -
       Caller Process ID:      -
       Transited Services:      -
       Source Network Address:
       Source Port:      0

BLGTS1 is our citrix terminal server
Does anyone know why this is happening? The Ctx_cpsvuser does reside as a local account on the terminal server. Everything in TS seems to be working ok. Any ideas to clean this up would be appreciated....
  • 4
  • 2
LVL 12

Accepted Solution

Daniel Borger earned 1600 total points
ID: 26121062
This will rebuild the account and assign the correct permission.
LVL 37

Assisted Solution

by:Carl Webster
Carl Webster earned 400 total points
ID: 26162028
Do exactly what dborger suggests or change the ctx_cpsvuser account to "local system".  That is what the account used to be but Citrix wisely changed it for security reasons.  Only change the account if the article dborger suggests does not work.

Author Comment

ID: 26180532
sounds good, I am waiting until my next after hours downtime to attempt this. I just don't want to break anything in Citrix!
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.


Author Comment

ID: 26293234
I will be attempting this soon, just had some other major work to do and did not want to do this as well. Is there any risk of "breaking" citrix if I do this? Or is the risk pretty low?
LVL 37

Expert Comment

by:Carl Webster
ID: 26299135
There is ultra low risk.

Author Comment

ID: 26418762
Just an update, will be doing this during next downtime hopefully this week

Author Closing Comment

ID: 31669776
The problem mysteriously went away- no more event logs for this citrix user account. I will award points and document the fix in case it comes back.

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Internet Explorer #Enterprise Mode #IE 11 #IE 8
Citrix XenDesktop 7.6 Citrix Policies Audio
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question