question

Kamlesh-2197 avatar image
0 Votes"
Kamlesh-2197 asked Kamlesh-2197 commented

Logon failure - unknown user name or bad password


KA
Kamlesh_346Created on September 3, 2021
Logon failure - unknown user name or bad password
Hi Team,

Due to security reason i have mark a black pen on the domain, account name & system name column.

i'm getting this error from all user accounts who are logged on this server but they are not doing anything.

can you please assist.

lets assume

domain : xyz

username : abc

account domain : qwe

server name : qwe

Disabled_Gu3st is guest account which is renamed and disabled from GPO.

129202-logonfailure-error.jpg


windows-server-2016
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

these alerts I'm receiving from all user account in a bunch, can someone please help

0 Votes 0 ·
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered Kamlesh-2197 commented

Hello Kamlesh,

The reason for the error may be that the Windows network credentials cache has cached different/recent passwords and The system keeps using that cached password rather than the password you entered.

It may be also due to a mess-up of permissions for the user account. that you must review Windows Firewall settings too, in case if they’ve blocked you to join the domain.

  1. Press W8K + R and put regedit in Run dialog box to open Registry Editor. Click OK.

navigate to the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Name the newly created registry DWORD (REG_DWORD) as LmCompatibilityLevel. Double click on this DWORD to modify its Data.

Finally, set the Value data to 1 and click OK, close Registry Editor.

Reboot the system and re-try to join the domain or shared machine with which you’re facing the issue. This will resolve your issue.

Hope this answers all your queries, if not please do repost back.
If an Answer is helpful, please click "Accept Answer" and upvote it : )

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks, but this error i'm getting from some other servers also.

What is the workaround for this, does only this registry changes will work, as this is my production server and we can't restart the server..

Thanks

0 Votes 0 ·
Docs-4663 avatar image
0 Votes"
Docs-4663 answered Kamlesh-2197 commented

These may help your troubleshooting:


The Status indicated: account restriction

A referenced user name and authentication information are valid,
but some user account restriction has prevented successful authentication
(such as time of day restrictions)



The Sub status indicated: the referenced account is currently disabled and may not be logged on to


.
.
.
.
.
Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post: Vote = a helpful post
.
.
.
.
.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

i have logged on to the server from my domain credentials and able to open locally shared folders. But under windows event viewer getting those alerts.....

Why explorer.exe is using local system guest account??

0 Votes 0 ·