User Name and Password Is Incorrect

Home Forums Microsoft Networking and Management Services Active Directory User Name and Password Is Incorrect

This topic contains 5 replies, has 3 voices, and was last updated by Avatar Robert R. 8 years, 3 months ago.

Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • Avatar
    Robert R.
    Participant
    #156716

    Environment: Multi-domain forest
    x.tld – empty root domain)
    prod.x.tld – production systems, Windows and Linux servers. Linux uses Winbind for A.D. authentication with office.x.tld credentials
    office.x.tld – office systems; this is where the user accounts reside

    Earlier this week, users were experiencing a problem where they received a “username or password is incorrect” error message when they attempted to log into some Windows servers in the prod.x.tld with their office.x.tld credentials.

    There were no reports of this problem occurring with the Linux servers in prod.x.tld

    The fix has been simple: remove the Windows servers from the prod.x.tld domain and then rejoin it to the prod.x.tld domain. I’m not sure how I came up with that; I think it was just a lucky shot-in-the-dark.

    However, I have not been able to determine the cause of this problem, and have not seen anything unusual in the logs.

    Does anybody have any idea what could have caused this, or what I should be looking for?

    Thanks.

    [IMG]http://forums.petri.com/attachment.php?attachmentid=5068&d=1320443840[/IMG]

    UPDATE (Nov. 08, 2011): It happened again sometime between Sunday morning and Monday morning. One one server was affected this time (but it was one that was affected last week).

    Avatar
    Robert R.
    Participant
    #353189

    Re: User Name and Password Is Incorrect

    The problem has been re-occurring on a few servers.

    In one instance, the server r25.prod.x.tld , I removed it from and re-joined it to the prod.x.tld domain last night after 6:00 pm.

    User OFFICEsmith was able to log in with her Active Directory credentials.

    This morning, she could not, and neither could I.

    There are no errors or warnings in the Application event viewer since the change last night.

    In the System event viewer I found the following, although it looks more like a symptom than a cause:

    Log Name: System
    Source: GroupPolicy
    EventID: 1030
    Level: Error
    User: OFFICEsmith
    OpCode: (1)
    Logged: 11/15/2011 7:50:53 AM
    Task Category: None
    Computer. r25.prod.x.tld

    The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look into the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An evet will be logged when Group Policy is successful.

    – EventData
    SupportInfo1 1
    SupportInfo2 2070
    ProcessingMode 0
    ErrorCode 1326
    ErrorDescription Logon failure: unknown user name or bad password
    DCName \dc01.office.x.tld

    Log Name: System
    Source: TermDD
    EventID: 56
    Level: Error
    User: N/A
    Logged: 11/15/2011 11:20:25 AM
    Task Category: none
    Keywords: Classic
    Computer: r25.prod.x.tld

    The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP: 192.168.205.85

    Avatar
    Virtual
    Member
    #334046

    Re: User Name and Password Is Incorrect

    It would be worth running a DCdiag on all domains.

    Avatar
    Robert R.
    Participant
    #353190

    Re: User Name and Password Is Incorrect

    Except for printer driver errors when logged in via Remote Desktop but not the console, both PROD.x.tld and OFFICE.x.tld domain passed dcdiag tests.

    Directory Server Diagnosis

    Performing initial setup:

    Trying to find home server…
    Home Server = dcp01
    * Identified AD Forest.
    Done gathering initial info.

    Doing initial required tests

    Testing server: Default-First-Site-NameDCP01

    Starting test: Connectivity
    ……………………. DCP01 passed test Connectivity

    Doing primary tests

    Testing server: Default-First-Site-NameDCP01

    Starting test: Advertising
    ……………………. DCP01 passed test Advertising

    Starting test: FrsEvent
    ……………………. DCP01 passed test FrsEvent

    Starting test: DFSREvent
    ……………………. DCP01 passed test DFSREvent

    Starting test: SysVolCheck
    ……………………. DCP01 passed test SysVolCheck

    Starting test: KccEvent
    ……………………. DCP01 passed test KccEvent

    Starting test: KnowsOfRoleHolders
    ……………………. DCP01 passed test KnowsOfRoleHolders

    Starting test: MachineAccount
    ……………………. DCP01 passed test MachineAccount

    Starting test: NCSecDesc
    ……………………. DCP01 passed test NCSecDesc

    Starting test: NetLogons
    ……………………. DCP01 passed test NetLogons

    Starting test: ObjectsReplicated
    ……………………. DCP01 passed test ObjectsReplicated

    Starting test: Replications
    ……………………. DCP01 passed test Replications

    Starting test: RidManager
    ……………………. DCP01 passed test RidManager

    Starting test: Services
    ……………………. DCP01 passed test Services

    Starting test: SystemLog

    An error event occurred. EventID: 0x00000457
    Time Generated: 11/15/2011 14:32:23
    Event String:
    Driver TP PS Driver 749F6D8709A2418eA3867536AC2AA2A3 required for printer 192.168.201.202#:1 is unknown. Contact the administrator to install the driver before you log in again.

    An error event occurred. EventID: 0x00000457
    Time Generated: 11/15/2011 14:32:26
    Event String:
    Driver HP LaserJet 5Si required for printer HP LaserJet 5Si is unknown. Contact the administrator to install the driver before you log in again.

    An error event occurred. EventID: 0x00000457
    Time Generated: 11/15/2011 14:48:37
    Event String:
    Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again.

    An error event occurred. EventID: 0x00000457
    Time Generated: 11/15/2011 14:48:38
    Event String:
    Driver HP LaserJet 9050 PCL 6 required for printer !!printserver!UIS-HPLJ9050_3rd_fl is unknown. Contact the administrator to install the driver before you log in again.

    An error event occurred. EventID: 0x00000457
    Time Generated: 11/15/2011 14:48:39
    Event String:
    Driver HP Color LaserJet CP6015 PCL 6 required for printer !!printserver!UIS-HPCP6015xh_2nd_fl is unknown. Contact the administrator to install the driver before you log in again.

    An error event occurred. EventID: 0x00000457
    Time Generated: 11/15/2011 14:48:39
    Event String:
    Driver KONICA MINOLTA bizhub C35 PCL6 required for printer !!printserver!LIT-KMC35 is unknown. Contact the administrator to install the driver before you log in again.

    ……………………. DCP01 failed test SystemLog

    Starting test: VerifyReferences
    ……………………. DCP01 passed test VerifyReferences

    Running partition tests on : DomainDnsZones

    Starting test: CheckSDRefDom
    ……………………. DomainDnsZones passed test CheckSDRefDom

    Starting test: CrossRefValidation
    ……………………. DomainDnsZones passed test

    CrossRefValidation

    Running partition tests on : prod

    Starting test: CheckSDRefDom
    ……………………. prod passed test CheckSDRefDom

    Starting test: CrossRefValidation
    ……………………. prod passed test CrossRefValidation

    Running partition tests on : ForestDnsZones

    Starting test: CheckSDRefDom
    ……………………. ForestDnsZones passed test CheckSDRefDom

    Starting test: CrossRefValidation
    ……………………. ForestDnsZones passed test

    CrossRefValidation

    Running partition tests on : Schema

    Starting test: CheckSDRefDom
    ……………………. Schema passed test CheckSDRefDom

    Starting test: CrossRefValidation
    ……………………. Schema passed test CrossRefValidation

    Running partition tests on : Configuration

    Starting test: CheckSDRefDom
    ……………………. Configuration passed test CheckSDRefDom

    Starting test: CrossRefValidation
    ……………………. Configuration passed test CrossRefValidation

    Running enterprise tests on : x.tld

    Starting test: LocatorCheck
    ……………………. x.tld passed test LocatorCheck

    Starting test: Intersite
    ……………………. x.tld passed test Intersite

    Avatar
    Robert R.
    Participant
    #353193

    Re: User Name and Password Is Incorrect

    This problem seems to have spontaneously resolved itself.

    I’m not complaining that it’s working now. But it bothers me that I don’t know the root cause or what changed to make it start working again.

    Very strange.

    Avatar
    biggles77
    Spectator
    #212492

    Re: User Name and Password Is Incorrect

    Did it resolve itself just after Patch Tuesday by any chance?

Viewing 6 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.