Re: cashed domain credentials, vpn, authentication failed

From: Dirk (ikke_at_ikke.com)
Date: 11/05/04

  • Next message: Steve Clark [MSFT]: "Re: Any one familiar with "DISA Gold Disk"????" 
    Date: Fri, 5 Nov 2004 00:24:16 +0100

    Yes indeed: the server is running Active Directory and this server is the
    domain controller (DC, AD)

    "Steve" <Steve@discussions.microsoft.com> schreef in bericht
    news:0888B7BF-0229-40B6-B585-6CD3141B7995@microsoft.com...
    > Are you running active directory?
    > If so, sounds like the computer is not set up properly in the domain.
    >
    >
    > "Dirk" wrote:
    >
    >> Hi,
    >>
    >>
    >>
    >> Client: Windows XP Pro SP2
    >>
    >> Server: Windows 2000 Server SP4 (DC, AD)
    >>
    >>
    >>
    >> I logon to my laptop with cached domain credentials (Event ID: 5719,
    >> Source:
    >> Netlogon). I start a VPN connection to my corporate network with a Cisco
    >> VPN
    >> client. I can ping our servers,...
    >>
    >>
    >>
    >> When I want to make a connection to a server share \\192.168.0.3\data i
    >> see
    >> a window asking my domain credentials. I give these credentials:
    >> DOMAIN\Username and the password (same as the cached domain credentials).
    >> I
    >> receive an error message that: "this account is the same as the one
    >> logged
    >> on to the system and that this account was tried before to logon. There
    >> is
    >> no domain controller available to validate this account."
    >>
    >>
    >>
    >> At the same time i see these errors in the system log of the Windows XP
    >> client:
    >>
    >> Event ID: 40960, Source: LSASRV, Category: SPNEGO (Negotiator)
    >>
    >> Event ID: 40961, Source: LSASRV, Category: SPNEGO (Negotiator)
    >>
    >>
    >>
    >> When i use other credentials to logon to this share
    >> (DOMAIN\AnotherUsername
    >> and the password - NOT the same credentials as the cached domain
    >> credentials) there is no problem. I don't see any messages in the event
    >> log.
    >>
    >>
    >>
    >> When i logon to this laptop with a local account (no cached domain
    >> credentials), start the VPN connection and make a connection to
    >> \\192.168.0.3\data with DOMAIN\Username i don't have any problem either.
    >>
    >>
    >>
    >> It seems that the problem is that the logon process only wants to
    >> validate
    >> my account only one time. At start-up the domain controller is not yet
    >> available and thus the system is using the cashed domain credentials.
    >> When
    >> my domain controller is available (vpn is active) the system doesn't want
    >> to
    >> validate my account anymore....
    >>
    >>
    >>
    >> Does anyone have an idea?
    >>
    >> Thanks in advance!
    >>
    >>
    >>
    >> Dirk
    >>
    >>
    >>

  • Next message: Steve Clark [MSFT]: "Re: Any one familiar with "DISA Gold Disk"????"

    Relevant Pages

    • Re: WNetAddConnection3 and Windows Logon Credentials
      ... Logon Creadentials pop-up and if click con Cancel the connection ... If the request was not received by the server it may be that you ... the user is prompted to enter logon credentials if no ...
      (microsoft.public.windowsce.platbuilder)
    • Re: Web Single Sign On
      ... Can Microsoft ISA Server solve such issues? ... current Windows credentials to the server, ... My web application sits on IIS located outside the domain. ... common identity is the user's username used to logon to the domain/active ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: 2003 Web Edition logon errors
      ... > succesfully logon to the machines. ... > users to logon with credentials from domain A. When selecting Domain C ... Unable to obtain Terminal Server User Configuration. ... > the windows 2000 boxes allow users to logon using credentials from ...
      (microsoft.public.win2000.advanced_server)
    • Re: 2003 Web Edition logon errors
      ... > I have three windows 2000 domains with one way trusts established ... > succesfully logon to the machines. ... > users to logon with credentials from domain A. When selecting Domain C ... Unable to obtain Terminal Server User Configuration. ...
      (microsoft.public.win2000.advanced_server)
    • Workgroup to access domain shares
      ... Running active directory on server ... Comuter names:, ... I would like to have to logon to which is on the domain. ...
      (comp.os.ms-windows.nt.admin.security)