Link to home
Start Free TrialLog in
Avatar of ahmeds1277
ahmeds1277

asked on

user cannot logon to some Terminal servers

AFter a time sync difference issue between a 20003 and 2008 dc that happened during night , which was sorted in morning and then the replication was fine as well .

Since then though users can logon to some terminal servers while cannot on few.  Their passwords dont work  even in accessing shares on those servers.

I have changed passwords , and tried few things  as restart  etc.

the error is :

      Logon ID:            0x0

Logon Type:                  3

Account For Which Logon Failed:
      Security ID:            NULL SID
      Account Name:            user
      Account Domain:            company

Failure Information:
      Failure Reason:            An Error occured during Logon.
      Status:                  0xc000006d
      Sub Status:            0x0

Process Information:
      Caller Process ID:      0x0
      Caller Process Name:      -

Network Information:
      Workstation Name:      W5105247
      Source Network Address:      -
      Source Port:            -

Detailed Authentication Information:
      Logon Process:            NtLmSsp
      Authentication Package:      NTLM
      Transited Services:      -
      Package Name (NTLM only):      -
      Key Length:            0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.


Any suggestion much appreciated
Avatar of Pradeep Kini
Pradeep Kini
Flag of India image

are these domain joined servers, I believe so. let me know other wise. The error you posted is related to authentication failures (kerberos).kerberos fails when the time diff between the client server is skewed beyond 5 mins., all you terminal servers should actually be syncing their time with the domain controllers / Auth time servers. checkout the w32tm command and its options to do this.
Also is it possible for you to disjoin one of the problem server and rejoin this to the domain ? to figure out securechannel issues, you could also use Nltest /sc_query: domain name or Test-computersecurechannel powershell command.

Ref:

https://social.msdn.microsoft.com/Forums/sqlserver/en-US/08cc77ad-6ba5-496a-8bd8-45ed05129b42/authentication-logon-failure-0xc000006d
ASKER CERTIFIED SOLUTION
Avatar of ahmeds1277
ahmeds1277

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.