[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntsecurity
Subject:    RE: [NTSEC] Login problems
From:       "Peter Cornell" <pcornell () ucar ! edu>
Date:       1999-07-26 14:41:46
[Download RAW message or body]


TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------

First of all, make sure your NT Workstations are members of your domain, NOT
a workgroup.  Then make sure the NT machines are logging into this domain,
not the local machine.  When you don't authenticate on the domain you will
get prompted for credentials whenever attaching to a network resource on the
domain.  This sounds like what's happening and this is NOT the security
model you want.

Second, check your user rights.
In User Manager for Domains under, Policies, User Rights:  Make sure the
following right is granted to the "Domain Users" default group:  "Access
this computer from the network."  This must be enabled for Domain Users, a
group that everyone is a member of by default.

If this doesn't help:  Do you have system policies in place?  If so make
sure there aren't restrictions that prohibit network logons for
non-administrative users.

Third, get rid of Win98!

- Peter C -

-----Original Message-----
From:	owner-ntsecurity@iss.net [mailto:owner-ntsecurity@iss.net] On Behalf
Of -
Sent:	Thursday, July 22, 1999 12:16 AM
To:	ntsecurity@iss.net
Subject:	[NTSEC] Login problems


TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------

Hello all,

    I am an administrator in a small network. Lately, I have been
experiencing some strange problems when users try to login to their
workstations. For ex. when a user tried to logon to a win98 workstation,
I got the message that either the password was incorrect or the user has
not been granted the requested logon type to this machine. I had to add
the user to the administrators group for the problem to disappear (?).
In NT workstations, the users can login normally, but when they try to
run some programs, they are asked for their password. In the event
viewer, I get messages of type security :
Logon Failure
Reason:The user has not been granted the requested logon type to this
machine... etc..
All users can logon to all workstations as I have set in the user
manager.
Could it be that someone has been tampering with the system?
Has anyone experienced something similar?

Thank you in advance,
Vlasis.

[prev in list] [next in list] [prev in thread] [next in thread]