asked on

ctx_cpsvcuser - Event ID 529 Unknown user name or bad password

I am getting the following error on sbs 2003 server reports in the security log
ctx_cpsvcuser - Event ID 529 Unknown user name or bad password
Logon Failure:
     Reason:      Unknown user name or bad password
     User Name:      ctx_cpsvcuser
     Domain:      BLGTS1
     Logon Type:      3
     Logon Process:      NtLmSsp
     Authentication Package:      NTLM
     Workstation Name:      BLGTS1
     Caller User Name:      -
     Caller Domain:      -
     Caller Logon ID:      -
     Caller Process ID:      -
     Transited Services:      -
     Source Network Address:      192.168.1.22
     Source Port:      0

BLGTS1 is our citrix terminal server 192.168.1.22
Does anyone know why this is happening? The Ctx_cpsvuser does reside as a local account on the terminal server. Everything in TS seems to be working ok. Any ideas to clean this up would be appreciated....

ASKER CERTIFIED SOLUTION

Daniel Borger

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Carl Webster

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

williamstechnologygroup

ASKER

sounds good, I am waiting until my next after hours downtime to attempt this. I just don't want to break anything in Citrix!

williamstechnologygroup

ASKER

I will be attempting this soon, just had some other major work to do and did not want to do this as well. Is there any risk of "breaking" citrix if I do this? Or is the risk pretty low?

Carl Webster

There is ultra low risk.

williamstechnologygroup

ASKER

Just an update, will be doing this during next downtime hopefully this week

williamstechnologygroup

ASKER

The problem mysteriously went away- no more event logs for this citrix user account. I will award points and document the fix in case it comes back.
Thanks