 |
|
|
|
Next: Windows XP keeps restarting
|
| Author |
Message |
External
Since: Feb 9, 2009
Posts: 7
|
(Msg. 1) Posted: Wed Jun 03, 2009 9:23 am
Post subject: Logon Error - Event ID 533
Archived from groups: microsoft>public>windowsxp>help_and_support (more info?)
|
|
|
WinXP SP3, System is standalone, not connected to a network
This is the text of the event:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 533
Date: 6/3/2009
Time: 08:14:05
User: NT AUTHORITY\SYSTEM
Computer: IS00002
Description:
Logon Failure:
Reason: User not allowed to logon at this computer
User Name: dummy
Domain: (deleted)
Logon Type: 2
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: (deleted)
--------------------------------------------------
The "deleted" text is for security purposes.
1) "Dummy" is member of "Users" Group
2) Local Security Settings, Log on locally = Users, Administrators
Note all Security Settings are DoD mandated.
Even if I create a new account like "Dummy" I get this error.
ONLY if I make a user (ANY user) a member of Administrators can they
logon.
I found the MS TeckNet article:
[URL="http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=533&EvtSrc=Security&LCID=1033"]http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=533&EvtSrc=Security&LCID=1033[/URL]
Also found many hits using Google.
Problem, none provided a fix or even a hint that applies in this case
(Users in Log on locally).
So, WHAT is the fix? |
|
| Back to top |
|
 | |
External
Since: Feb 9, 2009
Posts: 7
|
(Msg. 2) Posted: Wed Jun 03, 2009 10:11 am
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
Gerry, the references do not apply. The fixes are for systems using
Domain Servers, NOT un-networked standalones.
On Jun 3, 9:39 am, "Gerry" wrote:
> MageMaster
>
> Some possibilities for you to consider:[URL="http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec..."]http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec...[/URL]
>
> --
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
>
> MageMaster wrote:
> > WinXP SP3, System is standalone, not connected to a network
>
> > This is the text of the event:
>
> > Event Type: Failure Audit
> > Event Source: Security
> > Event Category: Logon/Logoff
> > Event ID: 533
> > Date: 6/3/2009
> > Time: 08:14:05
> > User: NT AUTHORITY\SYSTEM
> > Computer: IS00002
>
> > Description:
> > Logon Failure:
> > Reason: User not allowed to logon at this computer
> > User Name: dummy
> > Domain: (deleted)
> > Logon Type: 2
> > Logon Process: User32
> > Authentication Package: Negotiate
> > Workstation Name: (deleted)
>
> > --------------------------------------------------
> > The "deleted" text is for security purposes.
>
> > 1) "Dummy" is member of "Users" Group
>
> > 2) Local Security Settings, Log on locally = Users, Administrators
>
> > Note all Security Settings are DoD mandated.
>
> > Even if I create a new account like "Dummy" I get this error.
>
> > ONLY if I make a user (ANY user) a member of Administrators can they
> > logon.
>
> > I found the MS TeckNet article:
> >[URL="http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W...."]http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W....[/URL]
>
> > Also found many hits using Google.
>
> > Problem, none provided a fix or even a hint that applies in this case
> > (Users in Log on locally).
>
> > So, WHAT is the fix?- Hide quoted text -
>
> - Show quoted text - |
|
| Back to top |
|
| |
External
Since: Feb 9, 2009
Posts: 7
|
(Msg. 3) Posted: Wed Jun 03, 2009 12:12 pm
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
The "Domain: (deleted)" = "Domain: IS00002"
The system is default WORKGROUP
Both keyboard & mouse are connected directly to this standalone PS/2.
This is a local keyboard, mouse, monitor.
I am assuming the error showing "Domain: IS00002" is what you get when
using a local logon. So, SHOULD a logon to a non-networked standalone
in a WORKGROUP, have a "Domain" name listed in this type of Event
Error?
OR, is that the error, something in WinXP thinks "Users" are logging
into an actual Domain? BUT, when ANYONE is a member of Administrators,
they do NOT have a logon problem.
On Jun 3, 10:45 am, "Gerry" wrote:
> MageMaster
>
> What version of Windows XP?
>
> Logon Type 2 - Interactive
> This is what occurs to you first when you think of logons, that is, a
> logon at the console of a computer. You'll see type 2 logons when a user
> attempts to log on at the local keyboard and screen whether with a
> domain account or a local account from the computer's local SAM. To tell
> the difference between an attempt to logon with a local or domain
> account look for the domain or computer name preceding the user name in
> the event's description. Don't forget that logon's through an KVM over
> IP component or a server's proprietary "lights-out" remote KVM feature
> are still interactive logons from the standpoint of Windows and will be
> logged as such.[URL="http://www.windowsecurity.com/articles/Logon-Types.html"]http://www.windowsecurity.com/articles/Logon-Types.html[/URL]
>
> [URL="http://www.microsoft.com/resources/documentation/windows/xp/all/prodd..."]http://www.microsoft.com/resources/documentation/windows/xp/all/prodd...[/URL]
>
> --
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
>
> MageMaster wrote:
> > Gerry, the references do not apply. The fixes are for systems using
> > Domain Servers, NOT un-networked standalones.
>
> > On Jun 3, 9:39 am, "Gerry" wrote:
> >> MageMaster
>
> >> Some possibilities for you to
> >> consider:[URL="http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec..."]http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec...[/URL]
>
> >> --
>
> >> Hope this helps.
>
> >> Gerry
> >> ~~~~
> >> FCA
> >> Stourport, England
> >> Enquire, plan and execute
> >> ~~~~~~~~~~~~~~~~~~~
>
> >> MageMaster wrote:
> >>> WinXP SP3, System is standalone, not connected to a network
>
> >>> This is the text of the event:
>
> >>> Event Type: Failure Audit
> >>> Event Source: Security
> >>> Event Category: Logon/Logoff
> >>> Event ID: 533
> >>> Date: 6/3/2009
> >>> Time: 08:14:05
> >>> User: NT AUTHORITY\SYSTEM
> >>> Computer: IS00002
>
> >>> Description:
> >>> Logon Failure:
> >>> Reason: User not allowed to logon at this computer
> >>> User Name: dummy
> >>> Domain: (deleted)
> >>> Logon Type: 2
> >>> Logon Process: User32
> >>> Authentication Package: Negotiate
> >>> Workstation Name: (deleted)
>
> >>> --------------------------------------------------
> >>> The "deleted" text is for security purposes.
>
> >>> 1) "Dummy" is member of "Users" Group
>
> >>> 2) Local Security Settings, Log on locally = Users, Administrators
>
> >>> Note all Security Settings are DoD mandated.
>
> >>> Even if I create a new account like "Dummy" I get this error.
>
> >>> ONLY if I make a user (ANY user) a member of Administrators can they
> >>> logon.
>
> >>> I found the MS TeckNet article:
> >>>[URL="http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W..."]http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W...[/URL]
>
> >>> Also found many hits using Google.
>
> >>> Problem, none provided a fix or even a hint that applies in this
> >>> case (Users in Log on locally).
>
> >>> So, WHAT is the fix?- Hide quoted text -
>
> >> - Show quoted text -- Hide quoted text -
>
> - Show quoted text - >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Dec 7, 2008
Posts: 157
|
(Msg. 4) Posted: Wed Jun 03, 2009 1:25 pm
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
MageMaster
Some possibilities for you to consider:
[URL="http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Security&phase=1"]http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Security&phase=1[/URL] >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Feb 9, 2009
Posts: 7
|
(Msg. 5) Posted: Wed Jun 03, 2009 2:45 pm
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
Neither. This is a DoD system, used where I work. This is why I
stated in my original post that all Security Settings are DoD
mandated. No network connection allowed. Win Updates via our Slip-
Stream CD use in our OEM product. AntiVirus Updates via CD, Symantec
Intelligent Updater.
As stated on my original post, WinXP SP3 was installed from scratch
(WinXP SP2 CD -> SP3 upgrade via CD). I have done this numerous
times.
On Jun 3, 1:39 pm, "Gerry" wrote:
> MageMaster
>
> I am confused. What is this computer to be used for? Is it a home or
> office computer?
>
> Have you just installed Windows XP? Have you answered these questions
> incorrectly?[URL="http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm"]http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm[/URL]
>
> --
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
>
> MageMaster wrote:
> > The "Domain: (deleted)" = "Domain: IS00002"
>
> > The system is default WORKGROUP
>
> > Both keyboard & mouse are connected directly to this standalone PS/2.
> > This is a local keyboard, mouse, monitor.
>
> > I am assuming the error showing "Domain: IS00002" is what you get when
> > using a local logon. So, SHOULD a logon to a non-networked standalone
> > in a WORKGROUP, have a "Domain" name listed in this type of Event
> > Error?
>
> > OR, is that the error, something in WinXP thinks "Users" are logging
> > into an actual Domain? BUT, when ANYONE is a member of Administrators,
> > they do NOT have a logon problem.
>
> > On Jun 3, 10:45 am, "Gerry" wrote:
> >> MageMaster
>
> >> What version of Windows XP?
>
> >> Logon Type 2 - Interactive
> >> This is what occurs to you first when you think of logons, that is, a
> >> logon at the console of a computer. You'll see type 2 logons when a
> >> user attempts to log on at the local keyboard and screen whether
> >> with a domain account or a local account from the computer's local
> >> SAM. To tell the difference between an attempt to logon with a local
> >> or domain account look for the domain or computer name preceding the
> >> user name in the event's description. Don't forget that logon's
> >> through an KVM over IP component or a server's proprietary
> >> "lights-out" remote KVM feature are still interactive logons from
> >> the standpoint of Windows and will be logged as
> >> such.[URL="http://www.windowsecurity.com/articles/Logon-Types.html"]http://www.windowsecurity.com/articles/Logon-Types.html[/URL]
>
> >>[URL="http://www.microsoft.com/resources/documentation/windows/xp/all/prodd...."]http://www.microsoft.com/resources/documentation/windows/xp/all/prodd....[/URL]
>
> >> --
>
> >> Hope this helps.
>
> >> Gerry
> >> ~~~~
> >> FCA
> >> Stourport, England
> >> Enquire, plan and execute
> >> ~~~~~~~~~~~~~~~~~~~
>
> >> MageMaster wrote:
> >>> Gerry, the references do not apply. The fixes are for systems using
> >>> Domain Servers, NOT un-networked standalones.
>
> >>> On Jun 3, 9:39 am, "Gerry" wrote:
> >>>> MageMaster
>
> >>>> Some possibilities for you to
> >>>> consider:[URL="http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec..."]http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec...[/URL]
>
> >>>> --
>
> >>>> Hope this helps.
>
> >>>> Gerry
> >>>> ~~~~
> >>>> FCA
> >>>> Stourport, England
> >>>> Enquire, plan and execute
> >>>> ~~~~~~~~~~~~~~~~~~~
>
> >>>> MageMaster wrote:
> >>>>> WinXP SP3, System is standalone, not connected to a network
>
> >>>>> This is the text of the event:
>
> >>>>> Event Type: Failure Audit
> >>>>> Event Source: Security
> >>>>> Event Category: Logon/Logoff
> >>>>> Event ID: 533
> >>>>> Date: 6/3/2009
> >>>>> Time: 08:14:05
> >>>>> User: NT AUTHORITY\SYSTEM
> >>>>> Computer: IS00002
>
> >>>>> Description:
> >>>>> Logon Failure:
> >>>>> Reason: User not allowed to logon at this computer
> >>>>> User Name: dummy
> >>>>> Domain: (deleted)
> >>>>> Logon Type: 2
> >>>>> Logon Process: User32
> >>>>> Authentication Package: Negotiate
> >>>>> Workstation Name: (deleted)
>
> >>>>> --------------------------------------------------
> >>>>> The "deleted" text is for security purposes.
>
> >>>>> 1) "Dummy" is member of "Users" Group
>
> >>>>> 2) Local Security Settings, Log on locally = Users, Administrators
>
> >>>>> Note all Security Settings are DoD mandated.
>
> >>>>> Even if I create a new account like "Dummy" I get this error.
>
> >>>>> ONLY if I make a user (ANY user) a member of Administrators can
> >>>>> they logon.
>
> >>>>> I found the MS TeckNet article:
> >>>>>[URL="http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W..."]http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W...[/URL]
>
> >>>>> Also found many hits using Google.
>
> >>>>> Problem, none provided a fix or even a hint that applies in this
> >>>>> case (Users in Log on locally).
>
> >>>>> So, WHAT is the fix?- Hide quoted text -
>
> >>>> - Show quoted text -- Hide quoted text -
>
> >> - Show quoted text -- Hide quoted text -
>
> - Show quoted text - >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Dec 7, 2008
Posts: 157
|
(Msg. 6) Posted: Wed Jun 03, 2009 3:25 pm
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
MageMaster
What version of Windows XP?
Logon Type 2 - Interactive
This is what occurs to you first when you think of logons, that is, a
logon at the console of a computer. You'll see type 2 logons when a user
attempts to log on at the local keyboard and screen whether with a
domain account or a local account from the computer's local SAM. To tell
the difference between an attempt to logon with a local or domain
account look for the domain or computer name preceding the user name in
the event's description. Don't forget that logon's through an KVM over
IP component or a server's proprietary "lights-out" remote KVM feature
are still interactive logons from the standpoint of Windows and will be
logged as such.
[URL="http://www.windowsecurity.com/articles/Logon-Types.html"]http://www.windowsecurity.com/articles/Logon-Types.html[/URL]
[URL="http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_default_settings.mspx?mfr=true"]http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_default_settings.mspx?mfr=true[/URL] >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Dec 7, 2008
Posts: 157
|
(Msg. 7) Posted: Wed Jun 03, 2009 5:25 pm
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
MageMaster
I am confused. What is this computer to be used for? Is it a home or
office computer?
Have you just installed Windows XP? Have you answered these questions
incorrectly?
[URL="http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm"]http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm[/URL] >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Jun 3, 2009
Posts: 13
|
(Msg. 8) Posted: Wed Jun 03, 2009 6:00 pm
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
Your security Audit log may be full, log in as an admin and delete it. If
that is not it then check out this policy
Computer Configuration\Windows Settings\Security Settings\Local
Policies\Security Options
If this policy is enabled, it causes the system to halt if a security audit
cannot be logged for any reason. Typically, an event will fail to be logged
when the security audit log is full and the retention method specified for
the security log is either Do Not Overwrite Events or Overwrite Events by
Days. The DOD configuration may have their own modifications to that policy. >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Dec 7, 2008
Posts: 157
|
(Msg. 9) Posted: Wed Jun 03, 2009 8:25 pm
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
MageMaster
Is this the software you are using?
[URL="http://www.microsoft.com/downloads/details.aspx?FamilyId=5D0681E7-DA18-4A9F-84A0-660934F27B80&displaylang=en#Requirements"]http://www.microsoft.com/downloads/details.aspx?FamilyId=5D0681E7-DA18-4A9F-84A0-660934F27B80&displaylang=en#Requirements[/URL] >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Feb 12, 2009
Posts: 7
|
(Msg. 10) Posted: Thu Jun 04, 2009 4:09 am
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
Gerry,
No. Your URL is for Win2003 systems only. Also the article is not
the governing DoD authority for the system we have to use.
On Thu, 4 Jun 2009 00:22:39 +0100, "Gerry" wrote:
> MageMaster
>
> Is this the software you are using?
> [URL="http://www.microsoft.com/downloads/details.aspx?FamilyId=5D0681E7-DA18-4A9F-84A0-660934F27B80&displaylang=en#Requirements"]http://www.microsoft.com/downloads/details.aspx?FamilyId=5D0681E7-DA18-4A9F-84A0-660934F27B80&displaylang=en#Requirements[/URL]
>
> --
>
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
> MageMaster wrote:
> > Neither. This is a DoD system, used where I work. This is why I
> > stated in my original post that all Security Settings are DoD
> > mandated. No network connection allowed. Win Updates via our Slip-
> > Stream CD use in our OEM product. AntiVirus Updates via CD, Symantec
> > Intelligent Updater.
> >
> > As stated on my original post, WinXP SP3 was installed from scratch
> > (WinXP SP2 CD -> SP3 upgrade via CD). I have done this numerous
> > times.
> >
> >
> > On Jun 3, 1:39 pm, "Gerry" wrote:
> >> MageMaster
> >>
> >> I am confused. What is this computer to be used for? Is it a home or
> >> office computer?
> >>
> >> Have you just installed Windows XP? Have you answered these questions
> >> incorrectly?[URL="http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm"]http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm[/URL]
> >>
> >> --
> >>
> >> Hope this helps.
> >>
> >> Gerry
> >> ~~~~
> >> FCA
> >> Stourport, England
> >> Enquire, plan and execute
> >> ~~~~~~~~~~~~~~~~~~~
> >>
> >>
> >>
> >> MageMaster wrote:
> >>> The "Domain: (deleted)" = "Domain: IS00002"
> >>
> >>> The system is default WORKGROUP
> >>
> >>> Both keyboard & mouse are connected directly to this standalone
> >>> PS/2. This is a local keyboard, mouse, monitor.
> >>
> >>> I am assuming the error showing "Domain: IS00002" is what you get
> >>> when using a local logon. So, SHOULD a logon to a non-networked
> >>> standalone in a WORKGROUP, have a "Domain" name listed in this type
> >>> of Event Error?
> >>
> >>> OR, is that the error, something in WinXP thinks "Users" are logging
> >>> into an actual Domain? BUT, when ANYONE is a member of
> >>> Administrators, they do NOT have a logon problem.
> >>
> >>> On Jun 3, 10:45 am, "Gerry" wrote:
> >>>> MageMaster
> >>
> >>>> What version of Windows XP?
> >>
> >>>> Logon Type 2 - Interactive
> >>>> This is what occurs to you first when you think of logons, that
> >>>> is, a logon at the console of a computer. You'll see type 2 logons
> >>>> when a user attempts to log on at the local keyboard and screen
> >>>> whether with a domain account or a local account from the
> >>>> computer's local SAM. To tell the difference between an attempt to
> >>>> logon with a local or domain account look for the domain or
> >>>> computer name preceding the user name in the event's description.
> >>>> Don't forget that logon's through an KVM over IP component or a
> >>>> server's proprietary "lights-out" remote KVM feature are still
> >>>> interactive logons from the standpoint of Windows and will be
> >>>> logged as
> >>>> such.[URL="http://www.windowsecurity.com/articles/Logon-Types.html"]http://www.windowsecurity.com/articles/Logon-Types.html[/URL]
> >>
> >>>> [URL="http://www.microsoft.com/resources/documentation/windows/xp/all/prodd..."]http://www.microsoft.com/resources/documentation/windows/xp/all/prodd...[/URL]
> >>
> >>>> --
> >>
> >>>> Hope this helps.
> >>
> >>>> Gerry
> >>>> ~~~~
> >>>> FCA
> >>>> Stourport, England
> >>>> Enquire, plan and execute
> >>>> ~~~~~~~~~~~~~~~~~~~
> >>
> >>>> MageMaster wrote:
> >>>>> Gerry, the references do not apply. The fixes are for systems
> >>>>> using Domain Servers, NOT un-networked standalones.
> >>
> >>>>> On Jun 3, 9:39 am, "Gerry" wrote:
> >>>>>> MageMaster
> >>
> >>>>>> Some possibilities for you to
> >>>>>> consider:[URL="http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec..."]http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec...[/URL]
> >>
> >>>>>> --
> >>
> >>>>>> Hope this helps.
> >>
> >>>>>> Gerry
> >>>>>> ~~~~
> >>>>>> FCA
> >>>>>> Stourport, England
> >>>>>> Enquire, plan and execute
> >>>>>> ~~~~~~~~~~~~~~~~~~~
> >>
> >>>>>> MageMaster wrote:
> >>>>>>> WinXP SP3, System is standalone, not connected to a network
> >>
> >>>>>>> This is the text of the event:
> >>
> >>>>>>> Event Type: Failure Audit
> >>>>>>> Event Source: Security
> >>>>>>> Event Category: Logon/Logoff
> >>>>>>> Event ID: 533
> >>>>>>> Date: 6/3/2009
> >>>>>>> Time: 08:14:05
> >>>>>>> User: NT AUTHORITY\SYSTEM
> >>>>>>> Computer: IS00002
> >>
> >>>>>>> Description:
> >>>>>>> Logon Failure:
> >>>>>>> Reason: User not allowed to logon at this computer
> >>>>>>> User Name: dummy
> >>>>>>> Domain: (deleted)
> >>>>>>> Logon Type: 2
> >>>>>>> Logon Process: User32
> >>>>>>> Authentication Package: Negotiate
> >>>>>>> Workstation Name: (deleted)
> >>
> >>>>>>> --------------------------------------------------
> >>>>>>> The "deleted" text is for security purposes.
> >>
> >>>>>>> 1) "Dummy" is member of "Users" Group
> >>
> >>>>>>> 2) Local Security Settings, Log on locally = Users,
> >>>>>>> Administrators
> >>
> >>>>>>> Note all Security Settings are DoD mandated.
> >>
> >>>>>>> Even if I create a new account like "Dummy" I get this error.
> >>
> >>>>>>> ONLY if I make a user (ANY user) a member of Administrators can
> >>>>>>> they logon.
> >>
> >>>>>>> I found the MS TeckNet article:
> >>>>>>> [URL="http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W..."]http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W...[/URL]
> >>
> >>>>>>> Also found many hits using Google.
> >>
> >>>>>>> Problem, none provided a fix or even a hint that applies in this
> >>>>>>> case (Users in Log on locally).
> >>
> >>>>>>> So, WHAT is the fix?- Hide quoted text -
> >>
> >>>>>> - Show quoted text -- Hide quoted text -
> >>
> >>>> - Show quoted text -- Hide quoted text -
> >>
> >> - Show quoted text - >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Feb 12, 2009
Posts: 7
|
(Msg. 11) Posted: Thu Jun 04, 2009 4:14 am
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
I'll double check, but I'm sure we overwrite every 30-days. Anyway,
we clear/save all Audit Logs every week, so a full log should not be
the problem.
Also, 2 days ago, I created a dummy account, member Users Group, for
testing. The user cannot logon and no Profile folder is made, as I
would expect.
On Wed, 3 Jun 2009 18:00:09 -0700, "The Real Truth MVP" wrote in message
> Neither. This is a DoD system, used where I work. This is why I
> stated in my original post that all Security Settings are DoD
> mandated. No network connection allowed. Win Updates via our Slip-
> Stream CD use in our OEM product. AntiVirus Updates via CD, Symantec
> Intelligent Updater.
>
> As stated on my original post, WinXP SP3 was installed from scratch
> (WinXP SP2 CD -> SP3 upgrade via CD). I have done this numerous
> times.
>
>
> On Jun 3, 1:39 pm, "Gerry" wrote:
> > MageMaster
> >
> > I am confused. What is this computer to be used for? Is it a home or
> > office computer?
> >
> > Have you just installed Windows XP? Have you answered these questions
> > incorrectly?[URL="http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm"]http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm[/URL]
> >
> > --
> >
> > Hope this helps.
> >
> > Gerry
> > ~~~~
> > FCA
> > Stourport, England
> > Enquire, plan and execute
> > ~~~~~~~~~~~~~~~~~~~
> >
> >
> >
> > MageMaster wrote:
> > > The "Domain: (deleted)" = "Domain: IS00002"
> >
> > > The system is default WORKGROUP
> >
> > > Both keyboard & mouse are connected directly to this standalone PS/2.
> > > This is a local keyboard, mouse, monitor.
> >
> > > I am assuming the error showing "Domain: IS00002" is what you get when
> > > using a local logon. So, SHOULD a logon to a non-networked standalone
> > > in a WORKGROUP, have a "Domain" name listed in this type of Event
> > > Error?
> >
> > > OR, is that the error, something in WinXP thinks "Users" are logging
> > > into an actual Domain? BUT, when ANYONE is a member of Administrators,
> > > they do NOT have a logon problem.
> >
> > > On Jun 3, 10:45 am, "Gerry" wrote:
> > >> MageMaster
> >
> > >> What version of Windows XP?
> >
> > >> Logon Type 2 - Interactive
> > >> This is what occurs to you first when you think of logons, that is, a
> > >> logon at the console of a computer. You'll see type 2 logons when a
> > >> user attempts to log on at the local keyboard and screen whether
> > >> with a domain account or a local account from the computer's local
> > >> SAM. To tell the difference between an attempt to logon with a local
> > >> or domain account look for the domain or computer name preceding the
> > >> user name in the event's description. Don't forget that logon's
> > >> through an KVM over IP component or a server's proprietary
> > >> "lights-out" remote KVM feature are still interactive logons from
> > >> the standpoint of Windows and will be logged as
> > >> such.[URL="http://www.windowsecurity.com/articles/Logon-Types.html"]http://www.windowsecurity.com/articles/Logon-Types.html[/URL]
> >
> > >>[URL="http://www.microsoft.com/resources/documentation/windows/xp/all/prodd..."]http://www.microsoft.com/resources/documentation/windows/xp/all/prodd...[/URL]
> >
> > >> --
> >
> > >> Hope this helps.
> >
> > >> Gerry
> > >> ~~~~
> > >> FCA
> > >> Stourport, England
> > >> Enquire, plan and execute
> > >> ~~~~~~~~~~~~~~~~~~~
> >
> > >> MageMaster wrote:
> > >>> Gerry, the references do not apply. The fixes are for systems using
> > >>> Domain Servers, NOT un-networked standalones.
> >
> > >>> On Jun 3, 9:39 am, "Gerry" wrote:
> > >>>> MageMaster
> >
> > >>>> Some possibilities for you to
> > >>>> consider:[URL="http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec..."]http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec...[/URL]
> >
> > >>>> --
> >
> > >>>> Hope this helps.
> >
> > >>>> Gerry
> > >>>> ~~~~
> > >>>> FCA
> > >>>> Stourport, England
> > >>>> Enquire, plan and execute
> > >>>> ~~~~~~~~~~~~~~~~~~~
> >
> > >>>> MageMaster wrote:
> > >>>>> WinXP SP3, System is standalone, not connected to a network
> >
> > >>>>> This is the text of the event:
> >
> > >>>>> Event Type: Failure Audit
> > >>>>> Event Source: Security
> > >>>>> Event Category: Logon/Logoff
> > >>>>> Event ID: 533
> > >>>>> Date: 6/3/2009
> > >>>>> Time: 08:14:05
> > >>>>> User: NT AUTHORITY\SYSTEM
> > >>>>> Computer: IS00002
> >
> > >>>>> Description:
> > >>>>> Logon Failure:
> > >>>>> Reason: User not allowed to logon at this computer
> > >>>>> User Name: dummy
> > >>>>> Domain: (deleted)
> > >>>>> Logon Type: 2
> > >>>>> Logon Process: User32
> > >>>>> Authentication Package: Negotiate
> > >>>>> Workstation Name: (deleted)
> >
> > >>>>> --------------------------------------------------
> > >>>>> The "deleted" text is for security purposes.
> >
> > >>>>> 1) "Dummy" is member of "Users" Group
> >
> > >>>>> 2) Local Security Settings, Log on locally = Users, Administrators
> >
> > >>>>> Note all Security Settings are DoD mandated.
> >
> > >>>>> Even if I create a new account like "Dummy" I get this error.
> >
> > >>>>> ONLY if I make a user (ANY user) a member of Administrators can
> > >>>>> they logon.
> >
> > >>>>> I found the MS TeckNet article:
> > >>>>>[URL="http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W..."]http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W...[/URL]
> >
> > >>>>> Also found many hits using Google.
> >
> > >>>>> Problem, none provided a fix or even a hint that applies in this
> > >>>>> case (Users in Log on locally).
> >
> > >>>>> So, WHAT is the fix?- Hide quoted text -
> >
> > >>>> - Show quoted text -- Hide quoted text -
> >
> > >> - Show quoted text -- Hide quoted text -
> >
> > - Show quoted text - >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Dec 7, 2008
Posts: 157
|
(Msg. 12) Posted: Thu Jun 04, 2009 4:25 am
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
|
|
| Back to top |
|
| |
External
Since: Dec 7, 2008
Posts: 157
|
(Msg. 13) Posted: Thu Jun 04, 2009 10:25 am
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
Tecknomage
Do not click on any links this person provider as he is the worst troll
current lurking in this newsgroups.
The suggestion regarding security logs should not apply if the overwrite
option has been selected and you have the default maximum of 512 kb. You
have received the failure report and no doubt later events are recorded
in the Security log. The comments by the Real Truth Imposter are
contradicted by the continuing recording of events.
How to Set Log Size and Overwrite Options
To specify log size and overwrite options, follow these steps:
Click Start, and then click Control Panel. Click Performance and
Maintenance, then click Administrative Tools, and then double-click
Computer Management. Or, open the MMC containing the Event Viewer
snap-in.
In the console tree, expand Event Viewer, and then right-click the log
in which you want to set size and overwrite options.
Under Log size, type the size that you want in the Maximum log size box.
Under When maximum log size is reached, click the overwrite option that
you want.
If you want to clear the log contents, click Clear Log.
Click OK.
Source: [URL="http://support.microsoft.com/kb/308427/en-us"]http://support.microsoft.com/kb/308427/en-us[/URL]
Take care Real Truth is plausible and many get taken in by him. Normally
he posts simple comments but on this occasion his remarks are more
complex. >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Dec 7, 2008
Posts: 157
|
(Msg. 14) Posted: Thu Jun 04, 2009 10:25 am
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
Tecknomage
OK so can you post me a link for the governing DoD authority for the
system you have to use?
You probably by now appreciate that this may not be the most appropriate
newsgroup for you problem. If I knew the software you are using I may be
able to suggest a better place to ask. >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
External
Since: Feb 9, 2009
Posts: 7
|
(Msg. 15) Posted: Thu Jun 04, 2009 11:18 am
Post subject: Re: Logon Error - Event ID 533
Archived from groups: per prev. post (more info?)
|
|
|
This classified PDF document is not for general release. Sorry.
As for Event Viewer, your method is the long way around. I have a
link to it in the Quick Launch Bar (from Admin Tools in Control
Panel). The filesize is more than enough, overwrite 30-days, but we
clear/save once a week, so that's not the issue.
The bottom line is, if [Local Security Settings, Log on locally =
Users, Administrators], what is preventing a user-name that is a
"Member of Users" from logging on?
They get the "your account is configured to prevent you from using
this computer. Please try another computer."
On Jun 4, 5:51 am, "Gerry" wrote:
> Tecknomage
>
> OK so can you post me a link for the governing DoD authority for the
> system you have to use?
>
> You probably by now appreciate that this may not be the most appropriate
> newsgroup for you problem. If I knew the software you are using I may be
> able to suggest a better place to ask.
>
> --
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
>
> Tecknomage wrote:
> > Gerry,
>
> > No. Your URL is for Win2003 systems only. Also the article is not
> > the governing DoD authority for the system we have to use.
>
> > On Thu, 4 Jun 2009 00:22:39 +0100, "Gerry" wrote:
>
> >> MageMaster
>
> >> Is this the software you are using?
> >>[URL="http://www.microsoft.com/downloads/details.aspx?FamilyId=5D0681E7-DA1...."]http://www.microsoft.com/downloads/details.aspx?FamilyId=5D0681E7-DA1....[/URL]
>
> >> --
>
> >> Gerry
> >> ~~~~
> >> FCA
> >> Stourport, England
> >> Enquire, plan and execute
> >> ~~~~~~~~~~~~~~~~~~~
>
> >> MageMaster wrote:
> >>> Neither. This is a DoD system, used where I work. This is why I
> >>> stated in my original post that all Security Settings are DoD
> >>> mandated. No network connection allowed. Win Updates via our Slip-
> >>> Stream CD use in our OEM product. AntiVirus Updates via CD,
> >>> Symantec Intelligent Updater.
>
> >>> As stated on my original post, WinXP SP3 was installed from scratch
> >>> (WinXP SP2 CD -> SP3 upgrade via CD). I have done this numerous
> >>> times.
>
> >>> On Jun 3, 1:39 pm, "Gerry" wrote:
> >>>> MageMaster
>
> >>>> I am confused. What is this computer to be used for? Is it a home
> >>>> or office computer?
>
> >>>> Have you just installed Windows XP? Have you answered these
> >>>> questions
> >>>> incorrectly?[URL="http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm"]http://pcsupport.about.com/od/operatingsystems/ss/instxpclean3_2.htm[/URL]
>
> >>>> --
>
> >>>> Hope this helps.
>
> >>>> Gerry
> >>>> ~~~~
> >>>> FCA
> >>>> Stourport, England
> >>>> Enquire, plan and execute
> >>>> ~~~~~~~~~~~~~~~~~~~
>
> >>>> MageMaster wrote:
> >>>>> The "Domain: (deleted)" = "Domain: IS00002"
>
> >>>>> The system is default WORKGROUP
>
> >>>>> Both keyboard & mouse are connected directly to this standalone
> >>>>> PS/2. This is a local keyboard, mouse, monitor.
>
> >>>>> I am assuming the error showing "Domain: IS00002" is what you get
> >>>>> when using a local logon. So, SHOULD a logon to a non-networked
> >>>>> standalone in a WORKGROUP, have a "Domain" name listed in this
> >>>>> type of Event Error?
>
> >>>>> OR, is that the error, something in WinXP thinks "Users" are
> >>>>> logging into an actual Domain? BUT, when ANYONE is a member of
> >>>>> Administrators, they do NOT have a logon problem.
>
> >>>>> On Jun 3, 10:45 am, "Gerry" wrote:
> >>>>>> MageMaster
>
> >>>>>> What version of Windows XP?
>
> >>>>>> Logon Type 2 - Interactive
> >>>>>> This is what occurs to you first when you think of logons, that
> >>>>>> is, a logon at the console of a computer. You'll see type 2
> >>>>>> logons when a user attempts to log on at the local keyboard and
> >>>>>> screen whether with a domain account or a local account from the
> >>>>>> computer's local SAM. To tell the difference between an attempt
> >>>>>> to logon with a local or domain account look for the domain or
> >>>>>> computer name preceding the user name in the event's description.
> >>>>>> Don't forget that logon's through an KVM over IP component or a
> >>>>>> server's proprietary "lights-out" remote KVM feature are still
> >>>>>> interactive logons from the standpoint of Windows and will be
> >>>>>> logged as
> >>>>>> such.[URL="http://www.windowsecurity.com/articles/Logon-Types.html"]http://www.windowsecurity.com/articles/Logon-Types.html[/URL]
>
> >>>>>>[URL="http://www.microsoft.com/resources/documentation/windows/xp/all/prodd..."]http://www.microsoft.com/resources/documentation/windows/xp/all/prodd...[/URL]
>
> >>>>>> --
>
> >>>>>> Hope this helps.
>
> >>>>>> Gerry
> >>>>>> ~~~~
> >>>>>> FCA
> >>>>>> Stourport, England
> >>>>>> Enquire, plan and execute
> >>>>>> ~~~~~~~~~~~~~~~~~~~
>
> >>>>>> MageMaster wrote:
> >>>>>>> Gerry, the references do not apply. The fixes are for systems
> >>>>>>> using Domain Servers, NOT un-networked standalones.
>
> >>>>>>> On Jun 3, 9:39 am, "Gerry" wrote:
> >>>>>>>> MageMaster
>
> >>>>>>>> Some possibilities for you to
> >>>>>>>> consider:[URL="http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec..."]http://www.eventid.net/display.asp?eventid=533&eventno=191&source=Sec...[/URL]
>
> >>>>>>>> --
>
> >>>>>>>> Hope this helps.
>
> >>>>>>>> Gerry
> >>>>>>>> ~~~~
> >>>>>>>> FCA
> >>>>>>>> Stourport, England
> >>>>>>>> Enquire, plan and execute
> >>>>>>>> ~~~~~~~~~~~~~~~~~~~
>
> >>>>>>>> MageMaster wrote:
> >>>>>>>>> WinXP SP3, System is standalone, not connected to a network
>
> >>>>>>>>> This is the text of the event:
>
> >>>>>>>>> Event Type: Failure Audit
> >>>>>>>>> Event Source: Security
> >>>>>>>>> Event Category: Logon/Logoff
> >>>>>>>>> Event ID: 533
> >>>>>>>>> Date: 6/3/2009
> >>>>>>>>> Time: 08:14:05
> >>>>>>>>> User: NT AUTHORITY\SYSTEM
> >>>>>>>>> Computer: IS00002
>
> >>>>>>>>> Description:
> >>>>>>>>> Logon Failure:
> >>>>>>>>> Reason: User not allowed to logon at this computer
> >>>>>>>>> User Name: dummy
> >>>>>>>>> Domain: (deleted)
> >>>>>>>>> Logon Type: 2
> >>>>>>>>> Logon Process: User32
> >>>>>>>>> Authentication Package: Negotiate
> >>>>>>>>> Workstation Name: (deleted)
>
> >>>>>>>>> --------------------------------------------------
> >>>>>>>>> The "deleted" text is for security purposes.
>
> >>>>>>>>> 1) "Dummy" is member of "Users" Group
>
> >>>>>>>>> 2) Local Security Settings, Log on locally = Users,
> >>>>>>>>> Administrators
>
> >>>>>>>>> Note all Security Settings are DoD mandated.
>
> >>>>>>>>> Even if I create a new account like "Dummy" I get this error.
>
> >>>>>>>>> ONLY if I make a user (ANY user) a member of Administrators
> >>>>>>>>> can they logon.
>
> >>>>>>>>> I found the MS TeckNet article:
> >>>>>>>>>[URL="http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W..."]http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=W...[/URL]
>
> >>>>>>>>> Also found many hits using Google.
>
> >>>>>>>>> Problem, none provided a fix or even a hint that applies in
> >>>>>>>>> this case (Users in Log on locally).
>
> >>>>>>>>> So, WHAT is the fix?- Hide quoted text -
>
> >>>>>>>> - Show quoted text -- Hide quoted text -
>
> >>>>>> - Show quoted text -- Hide quoted text -
>
> >>>> - Show quoted text -- Hide quoted text -
>
> - Show quoted text - >> Stay informed about: Logon Error - Event ID 533 |
|
| Back to top |
|
| |
| Related Topics: | TCPIP event error 4226 - i keep getting this warning once a day TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts. For more information, see Help and Support Center at ..
error message - Good evening to all. I keep getting Rundll error loading bonalopi.dl the specified module could not be found. I can't access EXCEL or WORD. Thanks
error code 2738 - XP home edition I've been tring to install iTunes the error appears during Quicktime installation. I did the regsvr32 vbscript.dll I get another error message LoadLibrary("vbscript.dll") failed - Error performing inpage operation. any ...
O.E. error; permission denied - Using Windows XP and Outlook Express. When I try to change the font for email, I receive an Microsoft Internet Explorer error box: an error has occurred in this dialog. Error: 501 Permission denied. Can someone explain how to get the font to..
Add/remove Error Messages - Im trying to unistall a bunch load of programs that are not needed and
is causing more problems. I want to go into add/remove programs but two
error messages occur. Is there a backdoor into add/remove program <what the duce> |
|
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum
|
|
|
|
|
|
|
FAQ
Search
Profile
Private Messages
Log in
