Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Intermittent User id from AD Domain is empty

Posted on 2013-01-29
8
Medium Priority
?
179 Views
Last Modified: 2013-07-07
Refer to attached screen.

Many of our patient registration kiosks (.Net app running on Win XP)
intermittently get the attached message upon login to the application.

This .Net application authenticate to our customer's AD (think it's AD 2000).

If a user successfully login (& remain login but don't logout), the user won't
face this issue.  To temporarily relieve this issue, we'll exit the IE browser,
relaunch IE & relogin & usually this will allow the user to login without
getting this error (but not necessarily always the user won't run into this
issue, just that it appears to be less of chance of running into it after IE
exit & relaunch).

What should I look for to troubleshoot this?
a) get Event Viewer logs from the affected kiosks / PCs ?
b) any specific logs from the AD ?
c) anything I can install on the kiosks to troubleshoot further?
    (such as httpwatcher?)
d) do you need a sample codes of the .Net when login

I was told by apps team there's no change to the apps
ADautherr.jpg
0
Comment
Question by:sunhux
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
8 Comments
 
LVL 1

Assisted Solution

by:mgbm_it
mgbm_it earned 334 total points
ID: 38830571
are those users directly connected to the AD ?
what kind of authentication are you using at your AD ?
0
 

Author Comment

by:sunhux
ID: 38831260
> are those users directly connected to the AD ?
I'm not a Wintel admin but sort of PM so I'm not too sure what's
meant by the above.  I was told there's domain controllers from
2 different domains involved here

>what kind of authentication are you using at your AD ?
It's Windows authentication (not Kerberos, not LDAP, I heard)
0
 
LVL 34

Assisted Solution

by:Paul MacDonald
Paul MacDonald earned 666 total points
ID: 38836269
This only happens on login?  Not after a user is already logged in?  

What if users refresh the browser before trying to log in?
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:sunhux
ID: 38842259
> This only happens on login?  Not after a user is already logged in?  
yes, that's right, immediately after login.  Never after user successfully login.

>What if users refresh the browser before trying to log in?
Haven't tried this.

Now, the suspicion is the DC / AD.  Any logs or troubleshooting
measures we can undertake on the DC / AD ?
0
 
LVL 34

Accepted Solution

by:
Paul MacDonald earned 666 total points
ID: 38842410
Maybe monitor the network, to see if there's a problem with the NIC or switch.
0
 

Author Comment

by:sunhux
ID: 38898094
I ran a continuous ping script from the web server to
the DC, no ping timeout.

Anyone has any VB or .Net script to simulate repeated
login authentication to the DC/AD ?
0
 

Author Closing Comment

by:sunhux
ID: 39305233
Not solved
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question