Logon Failure User Account Restriction

[bawalker]

Hello all,

I have been wracking my brain at this for several days now. Currently
I have an in home/business with a Windows Server 2003 setup with
Active Directory and several XP Pro workstations attached to it. I
have been running this setup since the Windows 2000 server days with
little problem.

However just within the past month I've had an issue on one XP
workstation that acts as a file server. On that workstation I have it
setup to be logged in as myself with a domain account that has
administrator permissions. Part of the role for this XP system is
when i work on a clients computer, I access my driver & downloads
share as I prep a customers computer. Even though their system isn't
on my domain, I have always been able to use a \\mypc\e$ and then
navigate into the specific folder to get the drivers I need. When I
do that I've always been prompted for a username and password. I'd
enter 'administrator' and 'mypassword' to gain access.

Then after I reformatted XP on that system, I started noticing some
issues when trying to accomplish the above. When accessing that
share, the administrator / mypassword wasn't getting accepted. I
eventually figured out it wated 'my-domainname\administrator' for the
username and same password.

I then tried this by taking a dell optiplex system that I reformatted
entirely, reinstalled XP, and only put on networking drivers. I then
tried to access my XP system even though this optiplex was NOT on the
domain. This time I simply got:

"Logon Failure : User Account Restriction...."

I checked and checked on google for hours and it seems that this issue
results alot from when two XP boxes are connected on a workgroup
setting, but this is not. This is my XP box inside a Windows Active
Directory and trying to access a "E$" share from a system outside the
active directory in a workgroup. This has worked for years but now is
not.

Can anyone help explain why and how to solve this? I'm at a loss now.

Thanks!

Brad

 

[Peter Foldes]

Moved to windows.server.active.directory and windows.server.networking

 

[Isaac Oben -MCSE, MCITP]

Hello Brad,
I am not sure if these might help, but it seems to be similar to what you
are experiencing..Take a look at it and let us know
http://www.computing.net/answers/windows-2003/logon-failure-user-account-restric/2927.html

If that doesn't work, then I will be looking more towards DNS and also file
permissions.
What if you completely allow (temporarily) everyone or authenticated users
full access to the share (\\mypc\e$ ), do you still have the problem?

Isaac

 

[bawalker]

Isaac,

Thanks for the link. However when I go into the registry to look at
the registry edit offered by that article, the registry option was set
to 0 already so that definitely didn't have anything to do with it.

I did some more testing of my own this morning thinking, it might be
my XP Pro workstation. So I removed it from the domain, made it join
a workgroup and then re-added it to the domain. At the same time I
also setup a new dell inspiron laptop with XP freshly installed with
drivers only on it and it was joined on the domain too. So i went to
the optiplex computer that was ONLY in a workgroup and tried to access
shares on both computers, and while both systems responded to pings, I
received the same error regarding accessing the shares. The shares
were open to everyone from admin rights down to 'everyone' rights.

Now I'm thinking it may not be an issue with my XP workstation, but an
issue with the Active Directory...?? Being that this issue is now
happening on a laptop here when I try to access shares on it?

The interesting thing is, for any computer INSIDE the active
directory, I can access the shares just fine. Just not when I'm on
the outside of the domain in a workgroup setup trying to access shares
via administrator access that I have.

Thoughts, suggestions??

Bradley