"Incorrect Username or Password" on log in

Experts,

I am looking for additional reasons why our user is sometimes able to log in to his Windows 7 computer that is joined to the domain and sometimes receives the message "Username or Password is Incorrect"; and he says he is tryping in the correct password.


I have verfied the basics:

1. Proper case is being typed by the user
2. Correct user name is being type by the user
3. Computer can reach the AD server (Windows 2008
4. No log on to restrictions is set for this user

Thank you in advance.
CCS-ITNetwork and Computer Systems AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
Any events in your event log, how is your active directory replication looking?

Thanks

Mike
Hypercat (Deb)Commented:
Possible reasons:

1. The user is choosing to log in to the local machine instead of the domain.
2.  The user has a local login and a domain login using the same user name but different passwords.
CCS-ITNetwork and Computer Systems AdministratorAuthor Commented:
Mike,

I will let you know tomorrow what the event log are showing, and for active directory replication, I don't believe we have this setup, I understand this is used in big organizations. We are not that big.


Hypercat,

I had the user enter the domain first and then her login credentials (domain\username) and the user got  "username or password is incorrrect" right away. I've observed when the user tries to log in in the domain without adding the "domain\" before the name which is the normal way, the "username or password is incorrect" does NOT show up right away, it's says "Welcome" for about 20 seconds and then shows the incorrect message.

The user does not have a local login, just domain.

Thanks.
Thriving as a woman in IT

The IT workforce is diversifying, but the gender gap in tech remains very real. Overcoming stereotypes, and the glass ceiling is important not only for individual women working in the field but for the industry as a whole. Here are eight things women in IT do to succeed.

nicepraveenCommented:
Hi,

You can check the following
1. Correct Keyboard selected (there are some different in US and UK Keyboard) so check and avoide using @,$, etc..
2. Give Switch user and provide the correct domain name and observe the logs.
CCS-ITNetwork and Computer Systems AdministratorAuthor Commented:
Update:

Windows Event Viewer shows no logs when the user attempts to login.

When user tries to login with:

Username
Password

The screen shows the Windows "busy" pointer or circle and "Welcome" next to it.

When user tries to login with,

DOMAIN\Username
Password

The  incorrect usename or password messages appearts.

Thank you.
nicepraveenCommented:
You have to check the domain controller security event logs for the logon failure.
Hypercat (Deb)Commented:
If you don't find anything useful in the security event logs, I would suggest trying the routine of unjoining the workstation from the domain, delete the AD computer account, then rejoin the domain.  

Another thing to look at would be whether there is possibly a physical connection issue - loose cables, problem at the switch or patch panel with loose wires or bad port, etc. You would normally think that would give a different error message (i.e., not able to reach a domain controller), but it's worth a look.
CCS-ITNetwork and Computer Systems AdministratorAuthor Commented:
Update:

Checked the Security event logs, I did not find a lot of logs of regarding this user except one. It was an Audit Failure that was logged when the user was having difficulties logging in.
The log shows a username that has this user's last name and a completely different first name trying to log in to that user's computer. Our username's format is "Firsname.Lastname".

I will try the unjoin/join from the domain as suggested by hypercat above.

This issue occurs most when the last user logged on to the computer was NOT this user, but if the last user was this user, all works like normal (I think due to password caching).Which means this user's login attemps fail when logging in to another user's computer when need to.
Hypercat (Deb)Commented:
Given that info, another idea occurs to me.  Is it possible that there's another user in AD with that name (the one that is causing the audit failure)? Or maybe there was at one time?  Also check the user's AD account and make sure that the Pre-Windows 2000 logon name matches the regular user logon name.

The other thought is that it's a SID issue - perhaps this user's account SID has gotten corrupted in some way.  In that case, I would advise completely removing the user's account and then creating a new one.  This might cause some problems with permissions, though, if the user has been delegated certain NTFS or Exchange-related permissions to her/her specific user name rather than as part of a group.  Also, of course, if you have Exchange and the user has a mailbox, you'd have to detach the user's mailbox from the old AD account, and then reattach it to the new one.
CCS-ITNetwork and Computer Systems AdministratorAuthor Commented:
hypercat,

*Another user exists with the same last name who was created in the process of troubleshooting this and that's all. No other existed before.
*I checked the Pre-Windows 2000 logon name and it matches the regular logon name.

Will proceed on Monday.
CCS-ITNetwork and Computer Systems AdministratorAuthor Commented:
As of today, this issue is still happening.

Does anyone have an idea of why a user with the correct settings in AD would have issues logging in to the domain on a computer joined to the domain?

It appears that when the user enters the credentials and presses Enter, windows is taking longer than normal to communicate with the AD, then "Incorrect Username or Password" shows up.

Can anyone give me a basic step-by-step of what occurs in the background when a domain user logs in to the domain?



Thank you.
CCS-ITNetwork and Computer Systems AdministratorAuthor Commented:
We found the issue being a space in the user's username when trying to log in.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CCS-ITNetwork and Computer Systems AdministratorAuthor Commented:
Tested answer and was the solution.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Security

From novice to tech pro — start learning today.