"Incorrect Username or Password" on log in

CCS-IT
CCS-IT used Ask the Experts™
on
Experts,

I am looking for additional reasons why our user is sometimes able to log in to his Windows 7 computer that is joined to the domain and sometimes receives the message "Username or Password is Incorrect"; and he says he is tryping in the correct password.


I have verfied the basics:

1. Proper case is being typed by the user
2. Correct user name is being type by the user
3. Computer can reach the AD server (Windows 2008
4. No log on to restrictions is set for this user

Thank you in advance.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2013

Commented:
Any events in your event log, how is your active directory replication looking?

Thanks

Mike
Possible reasons:

1. The user is choosing to log in to the local machine instead of the domain.
2.  The user has a local login and a domain login using the same user name but different passwords.
CCS-ITNetwork and Computer Systems Administrator

Author

Commented:
Mike,

I will let you know tomorrow what the event log are showing, and for active directory replication, I don't believe we have this setup, I understand this is used in big organizations. We are not that big.


Hypercat,

I had the user enter the domain first and then her login credentials (domain\username) and the user got  "username or password is incorrrect" right away. I've observed when the user tries to log in in the domain without adding the "domain\" before the name which is the normal way, the "username or password is incorrect" does NOT show up right away, it's says "Welcome" for about 20 seconds and then shows the incorrect message.

The user does not have a local login, just domain.

Thanks.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Hi,

You can check the following
1. Correct Keyboard selected (there are some different in US and UK Keyboard) so check and avoide using @,$, etc..
2. Give Switch user and provide the correct domain name and observe the logs.
CCS-ITNetwork and Computer Systems Administrator

Author

Commented:
Update:

Windows Event Viewer shows no logs when the user attempts to login.

When user tries to login with:

Username
Password

The screen shows the Windows "busy" pointer or circle and "Welcome" next to it.

When user tries to login with,

DOMAIN\Username
Password

The  incorrect usename or password messages appearts.

Thank you.
You have to check the domain controller security event logs for the logon failure.
If you don't find anything useful in the security event logs, I would suggest trying the routine of unjoining the workstation from the domain, delete the AD computer account, then rejoin the domain.  

Another thing to look at would be whether there is possibly a physical connection issue - loose cables, problem at the switch or patch panel with loose wires or bad port, etc. You would normally think that would give a different error message (i.e., not able to reach a domain controller), but it's worth a look.
CCS-ITNetwork and Computer Systems Administrator

Author

Commented:
Update:

Checked the Security event logs, I did not find a lot of logs of regarding this user except one. It was an Audit Failure that was logged when the user was having difficulties logging in.
The log shows a username that has this user's last name and a completely different first name trying to log in to that user's computer. Our username's format is "Firsname.Lastname".

I will try the unjoin/join from the domain as suggested by hypercat above.

This issue occurs most when the last user logged on to the computer was NOT this user, but if the last user was this user, all works like normal (I think due to password caching).Which means this user's login attemps fail when logging in to another user's computer when need to.
Given that info, another idea occurs to me.  Is it possible that there's another user in AD with that name (the one that is causing the audit failure)? Or maybe there was at one time?  Also check the user's AD account and make sure that the Pre-Windows 2000 logon name matches the regular user logon name.

The other thought is that it's a SID issue - perhaps this user's account SID has gotten corrupted in some way.  In that case, I would advise completely removing the user's account and then creating a new one.  This might cause some problems with permissions, though, if the user has been delegated certain NTFS or Exchange-related permissions to her/her specific user name rather than as part of a group.  Also, of course, if you have Exchange and the user has a mailbox, you'd have to detach the user's mailbox from the old AD account, and then reattach it to the new one.
CCS-ITNetwork and Computer Systems Administrator

Author

Commented:
hypercat,

*Another user exists with the same last name who was created in the process of troubleshooting this and that's all. No other existed before.
*I checked the Pre-Windows 2000 logon name and it matches the regular logon name.

Will proceed on Monday.
CCS-ITNetwork and Computer Systems Administrator

Author

Commented:
As of today, this issue is still happening.

Does anyone have an idea of why a user with the correct settings in AD would have issues logging in to the domain on a computer joined to the domain?

It appears that when the user enters the credentials and presses Enter, windows is taking longer than normal to communicate with the AD, then "Incorrect Username or Password" shows up.

Can anyone give me a basic step-by-step of what occurs in the background when a domain user logs in to the domain?



Thank you.
Network and Computer Systems Administrator
Commented:
We found the issue being a space in the user's username when trying to log in.
CCS-ITNetwork and Computer Systems Administrator

Author

Commented:
Tested answer and was the solution.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial