Solved

user on windows 7 laptop keeps getting prompt for credentials - other users on same machine ok

Posted on 2013-11-21
5
486 Views
Last Modified: 2013-11-27
I have a windows 7 pro machine on a windows 2003 domain.  I have a single user that when logging in, the logon script does not run and they cannot access network shares because the system keeps prompting for credentials.   They get the "The system detected a possible attempt to compromise security" message.

I checked the user - Des is not selected for the user.
I have removed the account and removed the  profile and registry entry for the profile (on this laptop).
I have tried other user accounts on this machine and they work fine.
user is not locked out or disabled.
I have removed the computer from the domain and re-added it.
Nothing seems to work.

I cannot figure out why this one account seems to have an issue.  

Any help is greatly appreciated.
0
Comment
Question by:schristo
  • 3
5 Comments
 
LVL 18

Expert Comment

by:web_tracker
ID: 39668132
I would just name the user profile... user_old, then recreate the user and transfer their data to the new user profile.
0
 
LVL 10

Expert Comment

by:Pramod Ubhe
ID: 39668582
go to start > run > type control keymgr.dll and hit enter
check if all the saved credentials are correct.
0
 

Author Comment

by:schristo
ID: 39668790
As stated in my original post.
I have completely deleted the user account/profile from the computer, so renaming it does not help.
I have also checked the credentials manager -- windows credentials have been disabled by your system administrator.   Certificate- based credentials -- have been disabled by your system administrator.  No generic credentials.
So nothing is stored.  This is the same for everyone that uses this machine.

All accounts that I have tried work fine on this machine except for one and that is the user that is supposed to use this machine.
0
 

Accepted Solution

by:
schristo earned 0 total points
ID: 39668924
I finally figured it out.  It was the MaxTokenSize issue.

Created registry key on computer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters

Entry: MaxTokenSize
Data type: REG_DWORD
Value: 48000

rebooted --- This corrected the issue
0
 

Author Closing Comment

by:schristo
ID: 39680226
I figured it out myself
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now