Solved

user on windows 7 laptop keeps getting prompt for credentials - other users on same machine ok

Posted on 2013-11-21
5
482 Views
Last Modified: 2013-11-27
I have a windows 7 pro machine on a windows 2003 domain.  I have a single user that when logging in, the logon script does not run and they cannot access network shares because the system keeps prompting for credentials.   They get the "The system detected a possible attempt to compromise security" message.

I checked the user - Des is not selected for the user.
I have removed the account and removed the  profile and registry entry for the profile (on this laptop).
I have tried other user accounts on this machine and they work fine.
user is not locked out or disabled.
I have removed the computer from the domain and re-added it.
Nothing seems to work.

I cannot figure out why this one account seems to have an issue.  

Any help is greatly appreciated.
0
Comment
Question by:schristo
  • 3
5 Comments
 
LVL 18

Expert Comment

by:web_tracker
ID: 39668132
I would just name the user profile... user_old, then recreate the user and transfer their data to the new user profile.
0
 
LVL 10

Expert Comment

by:Pramod Ubhe
ID: 39668582
go to start > run > type control keymgr.dll and hit enter
check if all the saved credentials are correct.
0
 

Author Comment

by:schristo
ID: 39668790
As stated in my original post.
I have completely deleted the user account/profile from the computer, so renaming it does not help.
I have also checked the credentials manager -- windows credentials have been disabled by your system administrator.   Certificate- based credentials -- have been disabled by your system administrator.  No generic credentials.
So nothing is stored.  This is the same for everyone that uses this machine.

All accounts that I have tried work fine on this machine except for one and that is the user that is supposed to use this machine.
0
 

Accepted Solution

by:
schristo earned 0 total points
ID: 39668924
I finally figured it out.  It was the MaxTokenSize issue.

Created registry key on computer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters

Entry: MaxTokenSize
Data type: REG_DWORD
Value: 48000

rebooted --- This corrected the issue
0
 

Author Closing Comment

by:schristo
ID: 39680226
I figured it out myself
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

One of the features I've come to appreciate about Windows 7 and Windows Server 2008 R2 is the ability to pin applications to the task bar. As useful a feature as I've found this, it does have some quirks.  For example, have you ever tried pinning an…
The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now