Announcement

Collapse
No announcement yet.

User Name and Password Is Incorrect

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • User Name and Password Is Incorrect

    Environment: Multi-domain forest
    x.tld - empty root domain)
    prod.x.tld - production systems, Windows and Linux servers. Linux uses Winbind for A.D. authentication with office.x.tld credentials
    office.x.tld - office systems; this is where the user accounts reside

    Earlier this week, users were experiencing a problem where they received a "username or password is incorrect" error message when they attempted to log into some Windows servers in the prod.x.tld with their office.x.tld credentials.

    There were no reports of this problem occurring with the Linux servers in prod.x.tld

    The fix has been simple: remove the Windows servers from the prod.x.tld domain and then rejoin it to the prod.x.tld domain. I'm not sure how I came up with that; I think it was just a lucky shot-in-the-dark.

    However, I have not been able to determine the cause of this problem, and have not seen anything unusual in the logs.

    Does anybody have any idea what could have caused this, or what I should be looking for?

    Thanks.




    UPDATE (Nov. 08, 2011): It happened again sometime between Sunday morning and Monday morning. One one server was affected this time (but it was one that was affected last week).
    Attached Files
    Last edited by Robert R.; 8th November 2011, 17:16.

  • #2
    Re: User Name and Password Is Incorrect

    The problem has been re-occurring on a few servers.

    In one instance, the server r25.prod.x.tld , I removed it from and re-joined it to the prod.x.tld domain last night after 6:00 pm.

    User OFFICE\smith was able to log in with her Active Directory credentials.

    This morning, she could not, and neither could I.

    There are no errors or warnings in the Application event viewer since the change last night.

    In the System event viewer I found the following, although it looks more like a symptom than a cause:

    Log Name: System
    Source: GroupPolicy
    EventID: 1030
    Level: Error
    User: OFFICE\smith
    OpCode: (1)
    Logged: 11/15/2011 7:50:53 AM
    Task Category: None
    Computer. r25.prod.x.tld

    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look into the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An evet will be logged when Group Policy is successful.

    - EventData
    SupportInfo1 1
    SupportInfo2 2070
    ProcessingMode 0
    ErrorCode 1326
    ErrorDescription Logon failure: unknown user name or bad password
    DCName \\dc01.office.x.tld



    Log Name: System
    Source: TermDD
    EventID: 56
    Level: Error
    User: N/A
    Logged: 11/15/2011 11:20:25 AM
    Task Category: none
    Keywords: Classic
    Computer: r25.prod.x.tld

    The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP: 192.168.205.85

    Comment


    • #3
      Re: User Name and Password Is Incorrect

      It would be worth running a DCdiag on all domains.

      Comment


      • #4
        Re: User Name and Password Is Incorrect

        Except for printer driver errors when logged in via Remote Desktop but not the console, both PROD.x.tld and OFFICE.x.tld domain passed dcdiag tests.


        Directory Server Diagnosis

        Performing initial setup:

        Trying to find home server...
        Home Server = dcp01
        * Identified AD Forest.
        Done gathering initial info.

        Doing initial required tests

        Testing server: Default-First-Site-Name\DCP01

        Starting test: Connectivity
        ......................... DCP01 passed test Connectivity



        Doing primary tests


        Testing server: Default-First-Site-Name\DCP01

        Starting test: Advertising
        ......................... DCP01 passed test Advertising

        Starting test: FrsEvent
        ......................... DCP01 passed test FrsEvent

        Starting test: DFSREvent
        ......................... DCP01 passed test DFSREvent

        Starting test: SysVolCheck
        ......................... DCP01 passed test SysVolCheck

        Starting test: KccEvent
        ......................... DCP01 passed test KccEvent

        Starting test: KnowsOfRoleHolders
        ......................... DCP01 passed test KnowsOfRoleHolders

        Starting test: MachineAccount
        ......................... DCP01 passed test MachineAccount

        Starting test: NCSecDesc
        ......................... DCP01 passed test NCSecDesc

        Starting test: NetLogons
        ......................... DCP01 passed test NetLogons

        Starting test: ObjectsReplicated
        ......................... DCP01 passed test ObjectsReplicated

        Starting test: Replications
        ......................... DCP01 passed test Replications

        Starting test: RidManager
        ......................... DCP01 passed test RidManager

        Starting test: Services
        ......................... DCP01 passed test Services

        Starting test: SystemLog

        An error event occurred. EventID: 0x00000457
        Time Generated: 11/15/2011 14:32:23
        Event String:
        Driver TP PS Driver 749F6D8709A2418eA3867536AC2AA2A3 required for printer 192.168.201.202#:1 is unknown. Contact the administrator to install the driver before you log in again.

        An error event occurred. EventID: 0x00000457
        Time Generated: 11/15/2011 14:32:26
        Event String:
        Driver HP LaserJet 5Si required for printer HP LaserJet 5Si is unknown. Contact the administrator to install the driver before you log in again.

        An error event occurred. EventID: 0x00000457
        Time Generated: 11/15/2011 14:48:37
        Event String:
        Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

        An error event occurred. EventID: 0x00000457
        Time Generated: 11/15/2011 14:48:38
        Event String:
        Driver HP LaserJet 9050 PCL 6 required for printer !!printserver!UIS-HPLJ9050_3rd_fl is unknown. Contact the administrator to install the driver before you log in again.

        An error event occurred. EventID: 0x00000457
        Time Generated: 11/15/2011 14:48:39
        Event String:
        Driver HP Color LaserJet CP6015 PCL 6 required for printer !!printserver!UIS-HPCP6015xh_2nd_fl is unknown. Contact the administrator to install the driver before you log in again.

        An error event occurred. EventID: 0x00000457
        Time Generated: 11/15/2011 14:48:39
        Event String:
        Driver KONICA MINOLTA bizhub C35 PCL6 required for printer !!printserver!LIT-KMC35 is unknown. Contact the administrator to install the driver before you log in again.

        ......................... DCP01 failed test SystemLog

        Starting test: VerifyReferences
        ......................... DCP01 passed test VerifyReferences



        Running partition tests on : DomainDnsZones

        Starting test: CheckSDRefDom
        ......................... DomainDnsZones passed test CheckSDRefDom

        Starting test: CrossRefValidation
        ......................... DomainDnsZones passed test

        CrossRefValidation


        Running partition tests on : prod

        Starting test: CheckSDRefDom
        ......................... prod passed test CheckSDRefDom

        Starting test: CrossRefValidation
        ......................... prod passed test CrossRefValidation


        Running partition tests on : ForestDnsZones

        Starting test: CheckSDRefDom
        ......................... ForestDnsZones passed test CheckSDRefDom

        Starting test: CrossRefValidation
        ......................... ForestDnsZones passed test

        CrossRefValidation


        Running partition tests on : Schema

        Starting test: CheckSDRefDom
        ......................... Schema passed test CheckSDRefDom

        Starting test: CrossRefValidation
        ......................... Schema passed test CrossRefValidation


        Running partition tests on : Configuration

        Starting test: CheckSDRefDom
        ......................... Configuration passed test CheckSDRefDom

        Starting test: CrossRefValidation
        ......................... Configuration passed test CrossRefValidation


        Running enterprise tests on : x.tld

        Starting test: LocatorCheck
        ......................... x.tld passed test LocatorCheck

        Starting test: Intersite
        ......................... x.tld passed test Intersite
        Last edited by Robert R.; 16th November 2011, 00:46.

        Comment


        • #5
          Re: User Name and Password Is Incorrect

          This problem seems to have spontaneously resolved itself.

          I'm not complaining that it's working now. But it bothers me that I don't know the root cause or what changed to make it start working again.

          Very strange.

          Comment


          • #6
            Re: User Name and Password Is Incorrect

            Did it resolve itself just after Patch Tuesday by any chance?
            1 1 was a racehorse.
            2 2 was 1 2.
            1 1 1 1 race 1 day,
            2 2 1 1 2

            Comment

            Working...
            X