Problem Logging in With a Particular User's Account
Chris Guimbellot
SBS2003, Windows XP Client.
I have a computer that I am having problems with when logging in using a
particular account. When the user logs in, he gets a message saying, that
the roaming profile could not be found, so it was logging him in using a
local profile. Then, it cannot find the profile, because its not on that
machine, so it presents a message saying it is logging in with a temporary
profile.
I had these problems yesterday, and couldn't figure it out, so I reformatted
and reinstalled the OS. After that, I am still having the problem. No I
don't know what to do.
I checked the event viewer and got some entries that really scared me. Here
they are:
IN THE SYSTEM LOG
EventID: 40960
Source: LSASRV
Category: SPNEGO (Negotiator)
Description:
The Security System detected an attempted downgrade attack for server
cifs/HI-SERVER. The failure code from authentication protocol Kerberos was
"There are currently no logon servers available to service the logon
request.
(0xc000005e)".
EventID: 40961
Source: LSASRV
Category: SPNEGO (Negotiator)
Description:
The Security System could not establish a secured connection with the server
cifs/HI-SERVER. No authentication protocol was available.
IN THE APPLICATION LOG
EventID: 1521
Source: Userenv
Category: None
Description:
Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the profile
will not be copied to the server when you logoff. Possible causes of this
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator.
DETAIL - The system detected a possible attempt to compromise security.
Please ensure that you can contact the server that authenticated you.
EventID: 1511
Source: Userenv
Category: None
Description:
Windows cannot find the local profile and is logging you on with a temporary
profile. Changes you make to this profile will be lost when you log off.
I did some research and made sure the "Change primary DNS suffix when domain
membership changes" box under Computer Name Changes was checked. Short of
that, I am pretty clueless. I know this must be some sort of DNS problem,
but it only seems to happen when that specific user logs in. Also, I know
nothing about DNS, so please be gentle. If I need to clarify, please let me
know.
Thanks in advance,
Chris
Brandy Nee [MSFT]
Thank you for posting to the SBS Newsgroup.
I am sorry for the delayed response due to the weekend. Please understand
that the newsgroups are staffed weekdays by Microsoft Support professionals
to answer your systems and applications questions. Your understanding is
greatly appreciated!
I understand that you encounter Roaming Profile issue when trying to log in
domain. If I have misunderstood your issue, please let me know.
Based on my experience, this problem may occur if you use NetBIOS over
TCP/IP (NetBT) to connect to your network, and you have a roaming user
profile. You may need download the hotfix 831651, please refer to the
following article
831651 "The roaming profile cannot be found" error message when you log on
to
http://support.microsoft.com/?id=831651
============
If the issue persists after you apply the Hotfix 831651, please help to
gather following information for further research:
[Note]: Based on my experience, there are various factors can cause this
issue and we need time to troubleshoot this issue. I greatly appreciate
your understanding and co-operation!
1. What is the "particular account"? Is it a domain administrator account
or just a normal user account?
2. Does this issue occur to all domain clients or only certain clients?
3. If you use the "particular account" to log on another client
workstation, will this issue occur?
4. When did the issue occur? Did you make any changes on the SBS Server
recently? For example, move the user roaming profile?
5. Where did you find event IDs 40960, 40961, 1521 and 1511? On the SBS
Server or the client workstation?
6. You mentioned that "When the user logs in, he gets a message saying,
that the roaming profile could not be found, so it was logging him in using
a local profile. Then, it cannot find the profile, because its not on that
machine, so it presents a message saying it is logging in with a temporary
profile." Please type the error messages word by word to the Newsgroup for
accurate research.
7. Please refer to the KB 221833 to gather the Userenv.log.
221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/default.aspx?scid=kb;EN-US;221833
You can zip the file as an attachment and send it to my mailbox:
v-br...@microsoft.com.
8. If you create a new user account, will this issue occur?
Please take your time to perform the steps. I am looking forward to hearing
from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Chris Guimbellot" <cguim...@FORGETSPAM.hifranchise.com>
>Subject: Problem Logging in With a Particular User's Account
>Date: Fri, 20 Jan 2006 12:28:58 -0500
>Lines: 73
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <O9K1AceH...@TK2MSFTNGP09.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mail.bookroomsnow.com 71.16.180.114
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:238242
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Chris Guimbellot
back to the board, but I have been out of town.
Regarding the message, I read the article you referred to and had alredy
had the most recent patched applied to the computer. That said, the only
other thing I have a question about is how can I figure out if I use NetBIOS
over
TCP/IP (NetBT) to connect to the network? I cant seem to find that anywhere.
Also, just to note, the computer was configured just like every other one on
my network, but I have had no problems with the others. Any ideas would be
appreciated. Thanks,
Chris
""Brandy Nee [MSFT]"" <v-br...@online.microsoft.com> wrote in message
news:d6kHOB%23HGH...@TK2MSFTNGXA02.phx.gbl...
Brandy Nee [MSFT]
Thank you for posting back!
I was just back to office yesterday.
To check whether the problematic client workstation uses
1. On the problematic client workstation. Go to Control Panel -> Network
Connections -> Double click "Local Area Connection".
2. On the General tab, click Properties.
3. On the General tab, highlight Internet Protocol (TCP/IP).
4. Click Properties.
5. On the General tab, click Advanced.
6. On the WINS tab, check whether there is any difference between the good
and problematic client workstations in the NetBIOS setting.
If the issue persists, please help me to gather all the information I have
required in my original reply.
Please take your time to perform the steps and gather the information. I am
Best regards,
Brandy Nee
>References: <O9K1AceH...@TK2MSFTNGP09.phx.gbl>
<d6kHOB#HGHA...@TK2MSFTNGXA02.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Tue, 7 Feb 2006 09:23:40 -0500
>Lines: 223
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <ORLqYI$KGHA...@TK2MSFTNGP09.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mail.hospitality-international.com 71.16.180.114
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:242764
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Chris Guimbellot
Thanks for the response. In terms of your most recent response, I checked a
few computers and the NetBIOS settings on all of them were 'Use NetBIOS
settings from the DHCP server'. That said, I remembered that you mentioned
that the problem was usually caused by NetBOIS, so on that particular PC
that I was having the problem with, I flipped the setting to Disable NetBIOS
over TCP/IP. I then logged in using the users account and didn't seem to
have any problems. When I changed it back, the problem started again. I know
that that is not the solution we are looking for here, but I thought I would
mention it.
Below are the answers to your original questions:
>1. What is the "particular account"? Is it a domain administrator account
>or just a normal user account?
This problem only seems to be affecting this particular user, as well as
newly created users who dont yet have a profile. This user is not an admin,
although he does have local admin priveleges on this PC (standard proceedure
for my PCs). The new users I create, on the other hand, have problems
logging in, but the problem seems to be a little different (see question 8).
On the other hand, existing users have no problems logging in (see number 2)
>2. Does this issue occur to all domain clients or only certain clients?
I only seem to receive the message with this user and any new ones I create.
The difference is that logging in using a newly created profile produces
different results then logging in using a newly created account. To examine,
see number 8 below. I think that the problem probably lies with the computer
having trouble interfacing with the server to SET UP a new profile. When I
log in using a user that already has a user profile, the user can log in
successfully, the profile loads, and I receive no error messages.
>3. If you use the "particular account" to log on another client
>workstation, will this issue occur?
No, the user is able to successfully log into the other computer without
problems, and no errors show up in the event log of that computer.
>4. When did the issue occur? Did you make any changes on the SBS Server
>recently? For example, move the user roaming profile?
No, I had not. The roaming user profile is in the same place it always was.
I went into the server and verified the location of the profile under his
account in Server Management. Is it possible that the permissions on the
user profile folder on the server are wrong? I wouldn't think they are
because I could save a file to the desktop in his profile, and when I went
to another computer and logged him in, I saw the file. Plus, I wouldn't
think it would be a problem because I can log in anywhere but on this
particular PC.
>5. Where did you find event IDs 40960, 40961, 1521 and 1511? On the SBS
>Server or the client workstation?
When he logs into that PC, I get the following messages on the client: 1521,
40960, and 40961.
I don't get any on the server.
>6. You mentioned that "When the user logs in, he gets a message saying,
>that the roaming profile could not be found, so it was logging him in using
>a local profile. Then, it cannot find the profile, because its not on that
>machine, so it presents a message saying it is logging in with a temporary
>profile." Please type the error messages word by word to the Newsgroup for
>accurate research.
Logging on with local profile message:
"Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to your profile
will not be copied to the server when you log off. Possible causes of the
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator."
Corresponds to event 1521 in the log.
The other message regarding the temporary profile no longer appeasers. The
only change I have made to the computer was to toggle the NetBIOS settings
as I mentioned at the top of the post. When I ran this test, though, I had
it set as it was originally when I first received the problem. I think the
reason why it didn't show up is because it only shows up once per user. It
did show when I created a new user in AD and logged on using that account
(see also number 8 below).
>7. Please refer to the KB 221833 to gather the Userenv.log.
>221833 How to enable user environment debug logging in retail builds of
>Windows
>http://support.microsoft.com/default.aspx?scid=kb;EN-US;221833
>You can zip the file as an attachment and send it to my mailbox:
>v-br...@microsoft.com.
I have sent you the file. I sent it with a .zip.txt extension so I wouldn't
have any trouble sending it with Outlook through my Exchange server. Just
remove the .txt and you should be able to open it.
>8. If you create a new user account, will this issue occur?
I created a new user with the same rights and permissions as the user in
questions and logged into the same PC. That user also was not able to log
into the computer without receiving the same message about not being able to
load his profile. Also, messages 1521, 1511, 40960, and 40961 were recorded
in the event logs.
The 1511 event corresponds with the temporary profile message referred to in
number 6. It did show for this user, and the text appeared as:
"Windows cannot find the local profile and is logging you on with a
temporary profile. Changes you make to this profile will be lost when you
log off."
Also, when I log onto another computer using this newly created profile, I
was able to log on without a problem.
Finally, I wanted to mention that if I log into the computer using the
wireless adapter (with the network cable unplugged), although I do not
receive any messages about not being able to load the user profile (no 1521
errors), I still receive the 40960 and 40961 errors, but this time instead
of referencing the server, they are referencing other computers on the
network. In fact I am getting both errors for what looks like each computer
on the network. When I logged in originally with the network cable plugged
in, I would only receive one of each error and they would refer to the
server only. I am not sure if this has anything to do with my problem, but I
thought I would mention it.
I have attempted to answer your questions in as much detail as possible.
Please let me know if there is anything else I can do to try to resolve
this. Thanks again for your continued help.
Chris
Brandy Nee [MSFT]
Thank you for posting back!
Thanks a lot for your very detailed reply! I have read through all your
reply and the userenv.log, please see my suggestions:
1. After analysis the userenv.log, based on my research, this issue may be
caused by the NIC. I suggest that you Unplug the Wireless NIC and test the
issue again.
2. Since this issue only occurs to one client workstation, please check the
TCP/IP Configuration on the problematic client workstation.
The TCP/IP Configuration on the Client workstation should be:
IP: Assigned by DHCP on SBS
Gateway: SBS internal NIC IP
DNS: SBS INTERNAL NIC IP as the only entry
============
If the issue persists after you perform the steps, please help me to gather
following information for further research:
1. After you unplug the wireless NIC, gather the userenv.log again. So I
can compare if there is any difference.
2. Just to double confirm, if you ask a good client to log on the
problematic client workstation, will this issue occur?
3. In your first reply on 20th Jan, you mentioned "he gets a message
saying, that the roaming profile could not be found", what is the exact
error message? Please type the error message word by word the Newsgroup for
research.
Please take your time to perform the steps and I am looking forward to
hearing from you!
Best regards,
Brandy Nee
<ORLqYI$KGHA...@TK2MSFTNGP09.phx.gbl>
<TZPNx$HLGH...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Wed, 8 Feb 2006 13:58:56 -0500
>Lines: 170
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <#Bqa4GOL...@TK2MSFTNGP09.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mail.hibrokerage.com 71.16.180.114
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:243053
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Chris Guimbellot
Thanks again for the reply. My answers are below:
> 1. After analysis the userenv.log, based on my research, this issue may be
> caused by the NIC. I suggest that you Unplug the Wireless NIC and test the
> issue again.
Actually, the problem is not with the wireless NIC, it seems to be with the
LAN (wired) connection. When I connect using the LAN only, I get both the
1521 error as well as the 40960 and 40961 errors. I also get the message
that says it cannot find the profile (entire message stated below in number
3).
> 2. Since this issue only occurs to one client workstation, please check
> the
> TCP/IP Configuration on the problematic client workstation.
>
> The TCP/IP Configuration on the Client workstation should be:
>
> IP: Assigned by DHCP on SBS
> Gateway: SBS internal NIC IP
> DNS: SBS INTERNAL NIC IP as the only entry
The TCP/IP settings for both the wireless NIC and the LAN card are the same,
and both correct. They point exactly where you said they should.
> If the issue persists after you perform the steps, please help me to
> gather
> following information for further research:
>
> 1. After you unplug the wireless NIC, gather the userenv.log again. So I
> can compare if there is any difference.
Since the LAN seems to be the one with the problem (and not the sireless), I
have sent you two files: one for booting on the wireless and one for the LAN
only. I have named them userenv_wireless.zip.txt and userenv_LAN.zip.txt.
> 2. Just to double confirm, if you ask a good client to log on the
> problematic client workstation, will this issue occur?
The issue does not occur when I log on with an existing user with a good
profile. The problem does occur when I log on either using this users
profile, or a new user that I create specifically to check this.
> 3. In your first reply on 20th Jan, you mentioned "he gets a message
> saying, that the roaming profile could not be found", what is the exact
> error message? Please type the error message word by word the Newsgroup
> for
> research.
The message only appears when I am using the LAN connection and the exact
message follows:
"Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to your profile
will not be copied to the server when you log off. Possible causes of the
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator."
I hope that I have answered your questions to your satisfaction. Thanks for
the continued help.
Chris
Brandy Nee [MSFT]
Thank you for posting back!
Chris, I have read through these two userenv.logs, it seems that the client
computer can not query AD and just leaving with 0. I understand that you
have two NICs installed on the problematic client workstation. Chris, may I
know whether you have any difficulty in disabling the Wireless NIC and test
the issue, please? Since we have seen many similar issues caused by the
wireless NICs, I strongly suggest that you disable the Wireless NIC for a
test. This is very important information for us to isolate whether this is
a hardware issue.
After you disable the Wireless card and if the issue persists, please help
me to gather the userenv.log to analysis again.
By the way, could you please explain how you "connect using the LAN only"?
I greatly appreciate your time and co-operation, and I am looking forward
to hearing from you!
Best regards,
Brandy Nee
<#Bqa4GOL...@TK2MSFTNGP09.phx.gbl>
<OwDz41V...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Thu, 9 Feb 2006 18:41:20 -0500
>Lines: 65
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <u12lVJd...@TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mail.reservahost.com 71.16.180.114
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:243449
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Chris Guimbellot
Thanks again for the response. Actually, I did disable the wireless NIC and
run the userenv.log. I sent it to you in the last email. The attachment was
called userenv_LAN.zip.txt. I will send it to you again in an email.
When I said "connect using the LAN only, I meant the regular NIC, with the
wireless NIC disabled.
If there are any more questions I can answer, please let me know.
Chris
""Brandy Nee [MSFT]"" <v-br...@online.microsoft.com> wrote in message
news:oMrMk6i...@TK2MSFTNGXA01.phx.gbl...
Brandy Nee [MSFT]
Thank you for posting back and keeping us updated!
Due to complicated of this issue, I am still doing research on your issue
now. If I have any results, I will update you ASAP. Thanks a lot for your
time and understanding!
Best regards,
Brandy Nee
<u12lVJd...@TK2MSFTNGP14.phx.gbl>
<oMrMk6i...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Mon, 13 Feb 2006 23:39:51 -0500
>Lines: 176
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <uuSJ0CSM...@TK2MSFTNGP10.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: c-71-56-117-159.hsd1.ga.comcast.net 71.56.117.159
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:244276
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Brandy,
>
solmanso
Hi all;
I need to use in Windows 2000 / XP a program that was coded to be run
in Windows 9x.
I'm trying to compile it using Visual Studio 6 installed on the Windows
2000 but unfortunately I'm receiving errors which refere to no space on
stack.
My computer has a large memory available.
It seems to me that the errors appear because of the differences
between programming to 32 bits or to 16 bits.
Are there any program or method that can help to solve it?
--
solmanso
------------------------------------------------------------------------
solmanso's Profile: http://www.msusenet.com/member.php?userid=6634
View this thread: http://www.msusenet.com/t-1873742543
Chris Guimbellot
Thanks for the continued help. I thought I would mention that now, I am no
longer getting the messages that pop up while logging on. It seems now I am
getting messages userenv 1006 and userenv 1030 upon logging in. Once logged
in, I cannot get any network resources such as email or (sometimes) network
folders. I also cannot run gpupdate when I am logged in. When I try, the
1006 and 1030 errors are generated again. Also, the problem is happening on
another notebook that I just reinstalled XP Pro on. It now seems to me that
it is more of a server problem. Thought I would let you know in case you
have any ideas. Let me know what the next step should be. Thanks,
Chris
""Brandy Nee [MSFT]"" <v-br...@online.microsoft.com> wrote in message
news:iHX0c5U...@TK2MSFTNGXA01.phx.gbl...
Brandy Nee [MSFT]
Thank you for posting back!
I understand that you no longer experience the error message when logging
in to domain through the problematic client workstation. However, you
notice that Event ID 1060 and 1030 are recorded. This issue also occurs on
another newly setup laptop. If I have misunderstood your concern, please
let me know.
In order to supplement your description, I need your help to gather the
following information:
1. Just to double confirm, you mentioned "the problem is happening on
another notebook that I just reinstalled XP Pro on", I need to know:
a. Do you mean you used the problematic client account to log on the
notebook and then the issue occurs?
b. How did you reinstall the XP Pro?
2. Where did you find the Event ID 1060 and 1030, on the problematic
workstation or SBS Server?
3. On the server, run "eventvwr" (without quotation marks), check whether
there are any errors. If yes, double click it, click the Copy button and
paste the full content to the Newsgroup.
Please perform same steps on the problematic client workstation.
Please do not edit or delete any result. We need the full error information
(e.g description, Event Source, etc) to perform accurate research.
4. On the problematic client workstation, open a command window, type
"ipconfig /all" (without quotation marks), copy and paste the full content
to the Newsgroup.
Please perform the same steps on the SBS Server.
5. On the problematic client workstation, can you ping SBS Server by name
and IP address?
6. Please help me to capture following two screen shots and send them to
the Newsgroup:
a. You mentioned "I cannot get any network resources such as email or
(sometimes) network folders". Please capture a screen shot with the error
message when you fail to access the network folders.
b. You also mentioned "I also cannot run gpupdate when I am logged in".
Please capture a screen shot for the error message.
Please take your time to perform the steps and I am looking forward to
hearing from you!
Best regards,
Brandy Nee
<uuSJ0CSM...@TK2MSFTNGP10.phx.gbl>
<iHX0c5U...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Wed, 15 Feb 2006 00:01:15 -0500
>Lines: 105
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <#7wobzeM...@tk2msftngp13.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: c-71-56-117-159.hsd1.ga.comcast.net 71.56.117.159
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:244557
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Chris Guimbellot
Once again, thanks for your continued help with this issue. Let me see if I
can go ahead and break this down so we can examine it better. I now have two
notebooks, each with problems. Forget about when I mentioned that I
reinstalled XP on one because that was a long time ago. Lets look at the
specific issues I am getting on each laptop. Before I describe each
specifically, I need to mention that to try to solve this problem, I
performed the following steps on each:
1. Removed from the domain by changing to a workgroup.
2. Deleted the problem computer accounts from the domain using active
directory.
3. Created two new computer accounts (with different names)
4. Joined each back to the domain using SBSs connect computer website.
Now that I have described that, I will look at each.
Laptop one (the original one I started the thread about).
The user can now log in, but it seems to take forever each time. The user
can also get his email through Outlook. He can also get shared files from
the server. He can ping the server by name as well as by IP. It would seem
as though everything is now okay with this machine except I receive the
following error messages (on the machine itself, there are no corresponding
messages on the server):
Type: Error
User: NT Authority\System
Source: Serene
Category: None
EventID: 1053
Description:
Windows cannot determine the user or computer name. (An internal error
occurred. ). Group Policy processing aborted.
Type: Error
User: NT Authority\System
Source: Serene
Category: None
EventID: 1054
Description:
Windows cannot obtain the domain controller name for your computer network.
(A socket operation was attempted to an unreachable host. ). Group Policy
processing aborted.
Type: Error
User: N/A
Source: AutoEnrollment
Category: None
EventID: 15
Description:
Automatic certificate enrollment for local system failed to contact the
active directory (0x80072751). A socket operation was attempted to an
unreachable host.
Enrollment will not be performed.
Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40960
Description:
The Security System detected an attempted downgrade attack for server
ldap/hi-server.hospitality.international.local. The failure code from
authentication protocol Kerberos was "There are currently no logon servers
available to service the logon request.
(0xc000005e)".
Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40961
Description:
The Security System could not establish a secured connection with the server
ldap/hi-server.hospitality.international.local. No authentication protocol
was available.
The IP configuration when I run IPConfig /all follows:
Windows IP Configuration
Host Name . . . . . . . . . . . . : CURTIS
Primary Dns Suffix . . . . . . . : hospitality.international.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hospitality.international.local
hospitality.international.local
international.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : hospitality.international.local
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
Ethernet NIC
Physical Address. . . . . . . . . : 00-02-3F-D7-24-B3
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.10.10.19
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.10.1
DHCP Server . . . . . . . . . . . : 10.10.10.1
DNS Servers . . . . . . . . . . . : 10.10.10.1
Primary WINS Server . . . . . . . : 10.10.10.1
Lease Obtained. . . . . . . . . . : Thursday, February 16, 2006
5:33:45AM
Lease Expires . . . . . . . . . . : Friday, February 24, 2006
5:33:45 AM
In regards to gpupdate, I receive the following error in the logs when I
try:
Type: Error
User: NT Authority\System
Source: Serene
Category: None
EventID: 1053
Description:
Windows cannot determine the user or computer name. (An internal error
occurred). Group policy processing aborted.
If there is any other relevant information I can provide about this machine,
please let me know.
Laptop 2 (the new one I am having problems with using another user I have
created)
The user can log in without receiving any pop-up messages. The user can also
retrieve files on shared folders. The user cannot, though, get his email
through Outlook. When I try to set up a mail account, I receive the
following message:
Microsoft Office Outlook: The action cannot be completed. The connection to
the Microsoft Exchange Server is unavailable. Outlook must be online or
connected to complete this action.
The events logged when I try to connect to exchange resemble the ones below
(the 40960 and 40961), but the connection they cannot establish is to the
server exchangeAB/HI-SERVER.
The PCs event logs reveal the following (no corresponding events are logged
on the server)
Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40960
Description:
The Security System detected an attempted downgrade attack for server
exchangeRFR/HI-SERVER. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to service the
logon request.
(0xc000005e)".
Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40961
Description:
The Security System could not establish a secured connection with the server
exchangeRFR/HI-SERVER. No authentication protocol was
available.hospitality.international.local. No authentication protocol was
available.
Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40960
Description:
The Security System detected an attempted downgrade attack for server
cifs/COMPLIANCEADMIN. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to service the
logon request.
(0xc000005e)".
Type: Warning
User: N/A
Source: LSASRV
Category: SPNEGO (Negotiator)
EventID: 40961
Description:
The Security System could not establish a secured connection with the server
cifs/COMPLIANCEADMIN. No authentication protocol was available.
These last two cifs messages will appear multiple times. They are referring
to other computers (not servers on the network). I only have one server, and
it is called HI-SERVER.
The ipconfig is the following:
Windows IP Configuration
Host Name . . . . . . . . . . . . : TYLER
Primary Dns Suffix . . . . . . . : hospitality.international.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hospitality.international.local
hospitality.international.local
international.local
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . : hospitality.international.local
Description . . . . . . . . . . . : Atheros AR5001X+ Wireless
Network Adapter
Physical Address. . . . . . . . . : 00-90-96-6D-88-09
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.10.10.27
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.10.1
DHCP Server . . . . . . . . . . . : 10.10.10.1
DNS Servers . . . . . . . . . . . : 10.10.10.1
Primary WINS Server . . . . . . . : 10.10.10.1
Lease Obtained. . . . . . . . . . : Thursday, February 16, 2006
6:15:02AM
Lease Expires . . . . . . . . . . : Friday, February 24, 2006
6:15:02 AM
In regards, to gpupdate, the message I get is:
Refreshing Policy...
User Policy Refresh has completed
Computer Policy Refresh has completed
I get no events in the logs to say it didn't.
I am kind of at a loss about what could possibly be the problem here. Are
there any other questions I can answer for you. Thanks again.
Chris
""Brandy Nee [MSFT]"" <v-br...@online.microsoft.com> wrote in message
news:RNNoswh...@TK2MSFTNGXA01.phx.gbl...
Jasony
I had the same problem (errors and all) as you, but I found a separate
discussion that referenced the Trend Micro SMB suite. Someone had worked with
a Microsoft representative and found the "Trend Micro Client/Server Security
Agent Personal Firewall" was the cause of the problem. I stopped/disabled the
service and the problem was resolved. Do you happened to have the Trend Micro
installed on your SBS server?
I have contacted Trend Micro support to have the issue resolved.
Chris Guimbellot
haven't tried to install more computers on the network since I installed it.
Are you saying that I need to disable on the PC or the server before
connecting? That would be great if it were that simple. I have been racking
my brain for weeks. And, as you can see, Brandy has as well. If you can, let
me know which one to disable. Thanks again,
Chris
"Jasony" <Jas...@discussions.microsoft.com> wrote in message
news:DB01DDBB-0659-4825...@microsoft.com...
Brandy Nee [MSFT]
Thank you for posting back!
Thanks a lot for Jason's experience sharing!
Chris, may I know where you install the TrendMicro SMB, please? On the
computer which you install the TrendMicro SMB, Please disable all the
TrendMicro SMB service and test the issue again.
I also suggest that you restart the computer which you install the
TrendMicro SMB into safe mode and test the issue again.
Thanks a lot for your time! If you have any further updates, please feel
free to let me know. I am looking forward to hearing from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
<#7wobzeM...@tk2msftngp13.phx.gbl>
<RNNoswh...@TK2MSFTNGXA01.phx.gbl>
<#ROKm4uM...@TK2MSFTNGP12.phx.gbl>
<DB01DDBB-0659-4825...@microsoft.com>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Thu, 16 Feb 2006 22:14:35 -0500
>Lines: 367
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>Message-ID: <eJv2JB3M...@TK2MSFTNGP15.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: c-71-56-117-159.hsd1.ga.comcast.net 71.56.117.159
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:245163
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Jasony
I just stop the service on the SBS server itself and left the client service
running. I have not had an issue with any clients at this point.
I would hope that Trend Micro is able to resolve the problem. I would like
to look into using the firewall feature in the future.
Brandy Nee [MSFT]
Thanks a lot for your experience sharing! Let's wait for Chris' reply.
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Problem Logging in With a Particular User's Account
>thread-index: AcYz2raVZQGT5XvHRkiCoA949bAC3w==
>X-WBNR-Posting-Host: 216.58.132.120
>From: =?Utf-8?B?SmFzb255?= <Jas...@discussions.microsoft.com>
>References: <O9K1AceH...@TK2MSFTNGP09.phx.gbl>
<d6kHOB#HGHA...@TK2MSFTNGXA02.phx.gbl>
<ORLqYI$KGHA...@TK2MSFTNGP09.phx.gbl>
<TZPNx$HLGH...@TK2MSFTNGXA01.phx.gbl>
<#Bqa4GOL...@TK2MSFTNGP09.phx.gbl>
<OwDz41V...@TK2MSFTNGXA01.phx.gbl>
<u12lVJd...@TK2MSFTNGP14.phx.gbl>
<oMrMk6i...@TK2MSFTNGXA01.phx.gbl>
<uuSJ0CSM...@TK2MSFTNGP10.phx.gbl>
<iHX0c5U...@TK2MSFTNGXA01.phx.gbl>
<#7wobzeM...@tk2msftngp13.phx.gbl>
<RNNoswh...@TK2MSFTNGXA01.phx.gbl>
<#ROKm4uM...@TK2MSFTNGP12.phx.gbl>
<DB01DDBB-0659-4825...@microsoft.com>
<eJv2JB3M...@TK2MSFTNGP15.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Fri, 17 Feb 2006 07:56:28 -0800
>Lines: 309
>Message-ID: <2F55FF05-ED0E-45F3...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:245318
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Chris Guimbellot
Sorry it has taken me so long to reply. Again, I have been out of town for a
few days. I wanted to let you know that the solution offered by jasony did
work. I want to thank you for helping me through this process and sticking
with it. I do appreciate it. Thanks again,
Chris
""Brandy Nee [MSFT]"" <v-br...@online.microsoft.com> wrote in message
news:lGj$CBeNGH...@TK2MSFTNGXA01.phx.gbl...
Chris Guimbellot
that out. I know I never would have. Anyway, thanks again. I really
appreciate it.
Chris
"Jasony" <Jas...@discussions.microsoft.com> wrote in message
news:2F55FF05-ED0E-45F3...@microsoft.com...
Brandy Nee [MSFT]
Thank you for posting back and keeping us updated!
I am glad to hear that the issue has being solved and thing is working
correctly on your side now.
It seems that the issue is caused by the Trend Micro service. It is my
pleasure to work with you on this issue. If you need any assistance in the
future, please feel free to let me know. I am glad to be working with you
again!
Best regards,
Brandy Nee
--------------------
>From: "Chris Guimbellot" <cguim...@FORGETSPAM.hifranchise.com>
>References: <O9K1AceH...@TK2MSFTNGP09.phx.gbl>
<d6kHOB#HGHA...@TK2MSFTNGXA02.phx.gbl>
<ORLqYI$KGHA...@TK2MSFTNGP09.phx.gbl>
<TZPNx$HLGH...@TK2MSFTNGXA01.phx.gbl>
<#Bqa4GOL...@TK2MSFTNGP09.phx.gbl>
<OwDz41V...@TK2MSFTNGXA01.phx.gbl>
<u12lVJd...@TK2MSFTNGP14.phx.gbl>
<oMrMk6i...@TK2MSFTNGXA01.phx.gbl>
<uuSJ0CSM...@TK2MSFTNGP10.phx.gbl>
<iHX0c5U...@TK2MSFTNGXA01.phx.gbl>
<#7wobzeM...@tk2msftngp13.phx.gbl>
<RNNoswh...@TK2MSFTNGXA01.phx.gbl>
<#ROKm4uM...@TK2MSFTNGP12.phx.gbl>
<DB01DDBB-0659-4825...@microsoft.com>
<eJv2JB3M...@TK2MSFTNGP15.phx.gbl>
<2F55FF05-ED0E-45F3...@microsoft.com>
<lGj$CBeNGH...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Tue, 21 Feb 2006 21:25:27 -0500
>Lines: 102
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <#Qyf$c1NGH...@TK2MSFTNGP10.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mail.hibrokerage.com 71.16.180.114
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:246324
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Jasony
was very close to the problem I was experiencing. That person contacted MS
support and found the Trend Micro service to be the problem. I tested and it
resolved my problem as well.
Brandy Nee [MSFT]
Thanks a lot for your great experience sharing! We do appreciate it! Your
experience sharing does benifit the other customers who read our newsgroups
regularly and they also learn from your interaction with us.
Please feel free to keep posting in our Newsgroup!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Problem Logging in With a Particular User's Account
>thread-index: AcY5aPvuT65+DyWdSJGHGVQCJV0Cdg==
>X-WBNR-Posting-Host: 216.58.132.120
>From: =?Utf-8?B?SmFzb255?= <Jas...@discussions.microsoft.com>
>References: <O9K1AceH...@TK2MSFTNGP09.phx.gbl>
<d6kHOB#HGHA...@TK2MSFTNGXA02.phx.gbl>
<ORLqYI$KGHA...@TK2MSFTNGP09.phx.gbl>
<TZPNx$HLGH...@TK2MSFTNGXA01.phx.gbl>
<#Bqa4GOL...@TK2MSFTNGP09.phx.gbl>
<OwDz41V...@TK2MSFTNGXA01.phx.gbl>
<u12lVJd...@TK2MSFTNGP14.phx.gbl>
<oMrMk6i...@TK2MSFTNGXA01.phx.gbl>
<uuSJ0CSM...@TK2MSFTNGP10.phx.gbl>
<iHX0c5U...@TK2MSFTNGXA01.phx.gbl>
<#7wobzeM...@tk2msftngp13.phx.gbl>
<RNNoswh...@TK2MSFTNGXA01.phx.gbl>
<#ROKm4uM...@TK2MSFTNGP12.phx.gbl>
<DB01DDBB-0659-4825...@microsoft.com>
<eJv2JB3M...@TK2MSFTNGP15.phx.gbl>
<2F55FF05-ED0E-45F3...@microsoft.com>
<#mB7cd1N...@TK2MSFTNGP14.phx.gbl>
>Subject: Re: Problem Logging in With a Particular User's Account
>Date: Fri, 24 Feb 2006 09:37:29 -0800
>Lines: 307
>Message-ID: <18CA32FC-40A4-4383...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:247270
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Chris Guimbellot
couldnt find it. Interesting.
Chris
"Jasony" <Jas...@discussions.microsoft.com> wrote in message
news:18CA32FC-40A4-4383...@microsoft.com...
c_m...@hotmail.com
the same problems, with exactly the same setup. I'll try disabling the
firewall this evening.
You're right though, it is a shame that TM hasn't fixed it yet.
Thanks, I'll let you know what happened.
Chris.
StoreThomas
- you might have spared me many sleepless nights ;)
Thomas