IIS integrated windows authentification suddenly failes for some ?
Jonte_at_bson.se
Date: 11/29/05
- Previous message: Joe Richards [MVP]: "Re: Enumerate administrators group with the aid of registry"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 29 Nov 2005 16:42:24 +0100
We are running an IIS5 on a windows 2000 server SP4 (no post sp4 rollup
package) with integrated windows authentification. This IIS server is a
member server in our windows server 2003 AD in interim mode. "Suddenly",
some users (just a hand full) get prompted for username and password with
the IIS computer name as account source instead of the domain, like
IIS_computernam\username. If you manually change this to domain\username and
type correct password you get in and then it works for that session. After a
reboot of your machine you get promted again.
The event id 681 from the security event log with the error code 3221225572
which will mean "User logon with misspelled or bad user account" on the IIS
server. The clients are Windows XP sp2. If I test another user account on
one of the failing XP machines it works fine.
I read some article that it might be some kerberos problem and I changed the
IIS-computer to a "Trusted for delegation ..." in the ADUC but with no
results. Has the profile for the failing users something to do with it ?
Plese help me !
Sincerely
\\Jonas B
- Previous message: Joe Richards [MVP]: "Re: Enumerate administrators group with the aid of registry"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
