Re: admin authentication errors in win2k3 server / XP environment

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 08/16/04 

Date: Mon, 16 Aug 2004 19:12:54 +0200

Hi David,

Are there any errors in System Logs or Application Logs on your Windows XP
PC? What user do you use when you try to manage your Exchange server? Is
this user part of domain administrators group? Can you access administrative
shares on this server e.g. \\exchange_server\c$?
Do you have ICF enabled on your Windows XP?

Mike

"David" <NOSPAMDavidGerst@anti-spam.tempco.com> wrote in message
news:%23t%231af6gEHA.1972@TK2MSFTNGP09.phx.gbl...
> I have a problem can't seem to figure out. I am an admin, and I'm having
> some security issues with the our exchange 2003 server only. I have no
> problems with our Primary Domain Controller (w2k3 std) or our gateway
server
> running ISA 2004 (w2k3 Std).
>
> From my XP workstation, if i try to remotely manage the Exchange server
(via
> right click 'my computer'->manage->Action->connect to another computer)
the
> mmc console comes up but if I try to review the event logs, or access the
> services list, or anything for that matter... I get an access denied
error.
> If I remote desktop into the exchange server or login at the machine, I
have
> no problems at all. I can view the event log, I can go into the services,
I
> can edit the active directory... whatever I want. Also, I have noticed on
> my workstation that my Office XP Outlook client is affected. when I start
> Outlook, it prompts me for my password which I believe it shouldn't do
> because it should be using the integrated user password. Also, if I hit
the
> send/receive button on outlook, the exchange server records some security
> failed events with my username/account... but, I don't get any error from
> within Outlook. Also, I am sending and receiving email just fine. I
> haven't encountered anything like this before and any help is greatly
> appreciated!
>
> Oh, and attached are sample event logs with username/domain removed.
>
> Logon Failure:
> Reason: Unknown user name or bad password
> User Name: myusername
> Domain: mydomain
> Logon Type: 4
> Logon Process: Advapi
> Authentication Package: Negotiate
> Workstation Name: EXCHANGE
> Caller User Name: EXCHANGE$
> Caller Domain: mydomain
> Caller Logon ID: (0x0,0x3E7)
> Caller Process ID: 980
> Transited Services: -
> Source Network Address: -
> Source Port: -
>
>
> For more information, see Help and Support Center at
>
> Logon Failure:
> Reason: Unknown user name or bad password
> User Name: myusername
> Domain: mydomain
> Logon Type: 3
> Logon Process: NtLmSsp
> Authentication Package: NTLM
> Workstation Name: myPc
> Caller User Name: -
> Caller Domain: -
> Caller Logon ID: -
> Caller Process ID: -
> Transited Services: -
> Source Network Address: 172.16.0.126
> Source Port: 1986
>
>

Relevant Pages

  • Re: Logs
    ... what version of Exchange are you running? ... Exchange 2000 and newer are relay-secure out of the box, ... The SMTP Protocol logs? ... I am working on an Exchange server with issues. ...
    (microsoft.public.exchange.admin)
  • Re: copy Transaction Log
    ... Have them specify exactly which logs they need for that period - Exchange Server has many different logs. ... >> I have an urgent request to provide a transaction log for one of our ...
    (microsoft.public.exchange.admin)
  • Re: Re: Unable to mail enable public folders in Exchange 2003
    ... We recently ran into this issue with Exchange 2003 running on SBS 2003. ... Matthew Byrd wrote: ... Restart the Exchange server and all Domain controllers ... the logs that show up b4 and after the ...
    (microsoft.public.exchange2000.admin)
  • Re: Security problem
    ... > some security issues with the our exchange 2003 server only. ... > If I remote desktop into the exchange server or login at the machine, ... > Logon Failure: ... > Caller User Name: EXCHANGE$ ...
    (microsoft.public.exchange.admin)
  • Re: Drive Configuration for Exchange 2003
    ... volume - it'd be ideal to get another raid1 volume for that. ... How to move Exchange databases and logs in Exchange Server 2003 ...
    (microsoft.public.exchange.admin)