Re: User locked out with event 537 under type 11 logon

From: Gijtech (junk_at_gijoes.com)
Date: 11/23/05

  • Next message: Steven L Umbach: "Re: User locked out with event 537 under type 11 logon" 
    Date: Tue, 22 Nov 2005 15:11:47 -0800

    I am still encountering this issue if anyone has a fix I would appreciate it.
      "Gijtech" <junk@gijoes.com> wrote in message news:%23MY7whX5FHA.3312@TK2MSFTNGP15.phx.gbl...
      I have a user logging in to the domain from a Win xp sp2 system, who after successfully logging into the domain then logs on to our intranet views an office document then enters the back command and finds his account locked out.

      looking at the event log on the users system reveals one entry of
      Logon Failure: Reason: An error occurred during logon
      User Name: username
      Domain: domain
      Logon Type: 11
      Logon Process: User32
      Authentication Package: Negotiate
      Workstation Name: computer name
      Status code: 0xC000005E
      Substatus code: 0x0

      followed by

      Logon Failure:Reason: Account locked out
      User Name: username
      Domain: domain
      Logon Type: 2
      Logon Process: User32
      Authentication Package: Negotiate
      Workstation Name: computer name

      at this point the user calls and we rest the account. user lockout is set for 5 fails not 1. we have hklm\Software\Microsoft\Windows NT\Current Version\Winlogon\cachedlogonscount set to 0 so I am at a loss as to why the system is attempting to use a cachedinteractive logon, and why is it failing w/ only one attempt.

  • Next message: Steven L Umbach: "Re: User locked out with event 537 under type 11 logon"

    Relevant Pages

    • Re: Event ID 537 - Windows Server 2003
      ... An error occurred during logon ... Workstation Name: - ... Substatus code: 0x0 ... Caller User Name: - ...
      (microsoft.public.security)
    • User locked out with event 537 under type 11 logon
      ... I have a user logging in to the domain from a Win xp sp2 system, who after successfully logging into the domain then logs on to our intranet views an office document then enters the back command and finds his account locked out. ... Logon Failure: Reason: An error occurred during logon ...
      (microsoft.public.win2000.security)
    • Re: User locked out with event 537 under type 11 logon
      ... with the cached logon disabled. ... Open Local Security Policy on his computer and then go to local policies/security options and make sure ... Workstation Name: computer name ... Substatus code: 0x0 ...
      (microsoft.public.win2000.security)
    • Re: User locked out with event 537 under type 11 logon
      ... Open Local Security Policy on his computer and then go to local policies/security options and make sure ... Logon Failure: Reason: An error occurred during logon ... Workstation Name: computer name ... Substatus code: 0x0 ...
      (microsoft.public.win2000.security)
    • User-level Restriction
      ... I've created it so that each user logging into the database will require a logon name and pw. ... Have the initials that were entered at the logon prompt automatically populate into the name field of a form. ...
      (microsoft.public.access.security)