|
Posted by Roger Abell [MVP] on November 30, 2007, 2:54 am
Please log in for more thread options Thanks for the reply and sorry the delay in getting back.
I am feeling pretty dense however, as I still do not "see"
the scenario, what you are seeing.
show/hide quoted text
> User logs into workstation via domain account - local workstation,
> security event log, shows that error each and every time.
I am just hearing that the user does log in but the event log
records that the login failed. Sounds dumb I know but that
is how I hear what you are saying and I am sorry but I just
do not follow and see the meaning.
Suppose that both login success and failure events are recorded.
What would you be seeing in the event log? in what sequence?
Roger
show/hide quoted text
> says...
>> ?? W95 Prof +SP2 and all updates
>> ?? did you really mean to indicate Windows 95 machines?
> Sorry, been a long week already - Win XP Prof + Sp2 and all updates.
>> I don't quite follow you where you say these machines record
>> login failures when the users do log in. They log in (succeed)
>> but the machine records a login failure ?? Can you give a bit
>> clearer understanding to me of what you are seeing?
> User logs into workstation via domain account - local workstation,
> security event log, shows that error each and every time.
>> This is a continuation of the prior thread's situation? where
>> you had SPNEGO failures getting recorded?
> Nope, no more SPNEGO logged anywhere.
> --
> Leythos
> - Igitur qui desiderat pacem, praeparet bellum.
> - Calling an illegal alien an "undocumented worker" is like calling a
> drug dealer an "unlicensed pharmacist"
> spam999free@rrohio.com (remove 999 for proper email address)
| 
XML Sitemap
> and all updates) showing event log entries (on the WKS) of logon
> failures each time a users logs on to the workstations. The server shows
> no errors and they can access all shares as permitted by their Group
> membership.
> I've checked DNS and time and all updates, server (Win 2003 Std r2) is
> working fine - if I disjoin the computer from the domain and rejoin it
> (after deleting the computer account) the problem goes away for weeks or
> never returns.
> Anyone seeing this anywhere else - all of these PC's have been in
> operation with this network for over 2 years.
> Network is clean, no malware at all, all protected by dual firewall
> appliances....
> --
> Leythos
> - Igitur qui desiderat pacem, praeparet bellum.
> - Calling an illegal alien an "undocumented worker" is like calling a
> drug dealer an "unlicensed pharmacist"
> spam999free@rrohio.com (remove 999 for proper email address)