NTLM

From: news.starhub.com.sg (asd_at_asd.dd)
Date: 12/30/03 

Date: Tue, 30 Dec 2003 16:36:09 +0800

Hi All,

It seems that I have a problem with NTLM in my Windows 2003. I tried to
access a program located in Windows 2003 server using my Win2K Professional.
When I tried to log into the application, it says "Access is Denied".

In the Event Log, I found this error,

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 30-Dec-03
Time: 2:58:53 PM
User: NT AUTHORITY\SYSTEM
Computer: OSAN
Description:
Logon Failure:
  Reason: An error occurred during logon
  User Name: wyc
  Domain: AAF
  Logon Type: 3
  Logon Process: NtLmSsp
  Authentication Package: NTLM
  Workstation Name: HELP
  Status code: 0xC000005E
  Substatus code: 0x0
  Caller User Name: -
  Caller Domain: -
  Caller Logon ID: -
  Caller Process ID: -
  Transited Services: -
  Source Network Address: xx.xxx.xxx.xx
  Source Port: 1496

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I search for help in both MSKB and Windows 2003 Help file. In Windows 2003
server, I found this article,

"You can configure this security setting by opening the appropriate policy
and expanding the console tree as such: Computer Configuration\Windows
Settings\Security Settings\Local Policies\Security Options\"

May I know where can I find it? Also, does anyone has experience this
before?

Thanks in advance.

Relevant Pages

  • Re: ISA SERVER NOT STARTING
    ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Another security question/issue.
    ... Time to audit your server and workstations with AV, Malware, and installed ... Logon Process: Advapi ... Caller User Name: servername$ ... Source Port: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Failed login attempts showing in the security log
    ... You can find more if you review your SMTP logs. ... The server is fully ... Logon Failure: ... Caller User Name: SERVER$ ...
    (microsoft.public.backoffice.smallbiz)
  • RE: Trend, IIS, Permissions, Exhaustion and close to very bad language :-) Heelp!
    ... I understand when you logon on Company web ... Does the IP address point your Windows XP clients or SBS Server? ... Is the IP address of the Windows XP client or server that in your network? ...
    (microsoft.public.windows.server.sbs)
  • Exchange, Event 537, and Access Denied, Oh my
    ... an error occurred during logon ... caller user name: - ... fails (which is what started me investigating this server in the first ... the authentication between the pda and iis occurs fine, ...
    (microsoft.public.windows.server.sbs)