No announcement yet.

Users unable to login to workstatons on EBS 2008

  • Filter
  • Time
  • Show
Clear All
new posts

  • Users unable to login to workstatons on EBS 2008

    We recently deployed a new Windows Essential Business Server configuration for a new client. Shortly after adding workstations to the domain users are unable to login on their workstations. They receive an error message stating that the policy does not allow them to login to this workstation.

    Upon checking the "Logon To" setting under account properties only has the server systems listed. All of the users in the domain now have this setting. After changing to "All Computers" they are able to login.

    Now the problem, after about 2-4 hours this is getting changed back to only the servers. We have reviewed the group policy settings and can not find why this is occuring.


  • #2
    Re: Users unable to login to workstatons on EBS 2008

    We setup logging for event Id 4738, User Account Management. Upon review the Essential Business Server's management server is performing the change.
    Log Name: Security
    Source: Microsoft-Windows-Security-Auditing
    Date: 1/26/2009 8:07:15 AM
    Event ID: 4738
    Task Category: User Account Management
    Level: Information
    Keywords: Audit Success
    User: N/A
    Computer: HMGTSVR.
    A user account was changed.
    Security ID: SYSTEM
    Account Name: HMGTSVR$
    Account Domain: DMAIN
    Logon ID: 0x2c8f887
    Target Account:
    Account Name: USERNAME
    Account Domain: DMAIN
    Changed Attributes:
    SAM Account Name: -
    Display Name: -
    User Principal Name: -
    Home Directory: -
    Home Drive: -
    Script Path: -
    Profile Path: -
    Password Last Set: -
    Account Expires: -
    Primary Group ID: -
    AllowedToDelegateTo: -
    Old UAC Value: -
    New UAC Value: -
    User Account Control: -
    User Parameters: -
    SID History: -
    Logon Hours: -
    Additional Information:
    Privileges: -
    Event Xml:
    <Event xmlns="">
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
    <TimeCreated SystemTime="2009-01-26T13:07:15.450Z" />
    <Correlation />
    <Execution ProcessID="632" ThreadID="1744" />
    <Security />
    <Data Name="Dummy">-</Data>
    <Data Name="TargetUserName">USERNAME</Data>
    <Data Name="TargetDomainName">DMAIN</Data>
    <Data Name="TargetSid">S-1-5-21-1003035753-251433000-1898486510-1612</Data>
    <Data Name="SubjectUserSid">S-1-5-18</Data>
    <Data Name="SubjectUserName">HMGTSVR$</Data>
    <Data Name="SubjectDomainName">DMAIN</Data>
    <Data Name="SubjectLogonId">0x2c8f887</Data>
    <Data Name="PrivilegeList">-</Data>
    <Data Name="SamAccountName">-</Data>
    <Data Name="DisplayName">-</Data>
    <Data Name="UserPrincipalName">-</Data>
    <Data Name="HomeDirectory">-</Data>
    <Data Name="HomePath">-</Data>
    <Data Name="ScriptPath">-</Data>
    <Data Name="ProfilePath">-</Data>
    <Data Name="UserWorkstations">HBKPSVR,HMSGSVR,HSECSVR,HM GTSVR</Data>
    <Data Name="PasswordLastSet">-</Data>
    <Data Name="AccountExpires">-</Data>
    <Data Name="PrimaryGroupId">-</Data>
    <Data Name="AllowedToDelegateTo">-</Data>
    <Data Name="OldUacValue">-</Data>
    <Data Name="NewUacValue">-</Data>
    <Data Name="UserAccountControl">-</Data>
    <Data Name="UserParameters">-</Data>
    <Data Name="SidHistory">-</Data>
    <Data Name="LogonHours">-</Data>


    • #3
      Re: Users unable to login to workstatons on EBS 2008

      Did you UTFW? Did you attach the workstations to the domain Using The F*** Wizard?

      Steven Teiger [SBS-MVP(2003-2009)]
      Iím honoured to have been selected for the SMB 150 list for 2013. This is the third time in succession (no logo available for 2011) that I have been honoured with this award.

      We donít stop playing because we grow old, we grow old because we stop playing.