 | SBS2003 User login error | | 
February 3rd, 2012, 04:18 AM
|
#1 (permalink)
| | Member
Join Date: Oct 2001 Location: Whitley Bay, UK
Posts: 339
|
Created a new user in SBS2003 in the normal fashion, but every day there are three logon failure errors in the security log with event ID 537.
The user in question is not present when these errors occur and it's always three errors with the last occurrence being 0830hrs.
Any ideas?
| 
|  | |
February 3rd, 2012, 06:49 AM
|
#2 (permalink)
| | [He who is Nude..]
Join Date: Mar 2007 Location: My own little world.
Posts: 11,145
|
Does the user have any scripts set to run at the time..?
Is the user's machine logged in (but locked) and/or do they have option to RDP in..?
__________________ I've seen the light... It was green, flashy and attached to a Network Interface Card... Whenever someone says "You can't miss it", I invariably do... | |
| | |
February 3rd, 2012, 06:55 AM
|
#3 (permalink)
| | Member
Join Date: Oct 2001 Location: Whitley Bay, UK
Posts: 339
|
No scripts, machine is powered down overnight and booted after the last event.
User has remote access via RWA but has not yet attempted remote login.
| |
| | |
February 3rd, 2012, 07:13 AM
|
#4 (permalink)
| | [He who is Nude..]
Join Date: Mar 2007 Location: My own little world.
Posts: 11,145
|
Are there any other users that have this issue, or are there any other users in at the time..?
| |
| | |
February 3rd, 2012, 07:15 AM
|
#5 (permalink)
| | Member
Join Date: Oct 2001 Location: Whitley Bay, UK
Posts: 339
|
No other users with this issue. There is possibly one other user logged in but not physically in the same office.
| |
| | |
February 3rd, 2012, 08:47 AM
|
#6 (permalink)
| | [He who is Nude..]
Join Date: Mar 2007 Location: My own little world.
Posts: 11,145
|
Are there any other alerts around the same time or anything else that might give a clue..?
(Perhaps you could do a screenie for me/us to see)
| |
| | |
February 3rd, 2012, 10:13 AM
|
#7 (permalink)
| | Member
Join Date: Oct 2001 Location: Whitley Bay, UK
Posts: 339
|
The only other alerts relate to low CPU idle time (every day) which I have been wrestling with for months and can't solve. The logon errors only started when I created this user account.
| |
| | |
February 3rd, 2012, 10:33 AM
|
#8 (permalink)
| | [He who is Nude..]
Join Date: Mar 2007 Location: My own little world.
Posts: 11,145
|
I presume that this user has now started using their account, otherwise I would have suggested disabling or deleting their account and starting again... o.O
Anyway, I'm finished at work now, so maybe I'll have a look at my W2k3 SBS at home in a bit...
| |
| | |
February 3rd, 2012, 10:34 AM
|
#9 (permalink)
| | [He who is Nude..]
Join Date: Mar 2007 Location: My own little world.
Posts: 11,145
|
Just a thought, but is it saying what machine/device/item the failed logins are linked to..?
| |
| | |
February 3rd, 2012, 10:46 AM
|
#10 (permalink)
| | Member
Join Date: Oct 2001 Location: Whitley Bay, UK
Posts: 339
|
Yes the user has started using their account. The workstation name field on the report is blank.
Status code is : 0xC00002EE
| |
| | | Most Active Discussions  | | | | |   Recent Discussions  | | | | |
 |
| | Thread Tools | Search this Thread |
| | |
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) |
| |
hardware
prices 
