| Author |
Message |
Doug Hansen
Guest
|
 Posted:
Thu Oct 13, 2005 4:51 pm Post subject:
Event ID: 705 |
|
|
Running HIS 2000 SP1 on W2K and get the following in the Sever Activity Log:
Event ID: 705
Source: SNA SERVER
Description: Logon Failed
Explanation: Access denied on client-server or Distributed Link Service
request. Unknown user name or bad password from client (Client name) ---
Error Code: 4097
This happens when a users account becomes locked or diasbled. Is there a fix
for this in HIS 2000 SP2?
Doug |
|
| Back to top |
|
 |
Charles Ezzell (MSFT)
Guest
|
| Posted:
Thu Oct 13, 2005 8:51 pm Post subject:
Re: Event ID: 705 |
|
|
I don't see this as an HIS problem. Unlock/re-enable the user account.
And, educate the user in whatever he/she is doing wrong that locks their
account.
--
HTH,
Charles Ezzell
Microsoft
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Doug Hansen" <dehansen@blair.com> wrote in message
news:eHfYhZA0FHA.916@TK2MSFTNGP10.phx.gbl...
| Quote: | Running HIS 2000 SP1 on W2K and get the following in the Sever Activity
Log:
Event ID: 705
Source: SNA SERVER
Description: Logon Failed
Explanation: Access denied on client-server or Distributed Link Service
request. Unknown user name or bad password from client (Client name) ---
Error Code: 4097
This happens when a users account becomes locked or diasbled. Is there a
fix
for this in HIS 2000 SP2?
Doug
|
|
|
| Back to top |
|
|
Doug Hansen
Guest
|
| Posted:
Fri Oct 14, 2005 12:51 am Post subject:
Re: Event ID: 705 |
|
|
Charles and Neil,
I'm sure that part is working by design, but why would it be causing so
much havoc to the server? When it's happening, I can't ping or RDP to the
server, but I can log into it from a KVM switch. When I shutdown the the PC
that the user was using at the time (account disabled) or unlock the user
account (locked account), then I am able to ping or RDP to the server.
"Doug Hansen" <dehansen@blair.com> wrote in message
news:eHfYhZA0FHA.916@TK2MSFTNGP10.phx.gbl...
| Quote: | Running HIS 2000 SP1 on W2K and get the following in the Sever Activity
Log:
Event ID: 705
Source: SNA SERVER
Description: Logon Failed
Explanation: Access denied on client-server or Distributed Link Service
request. Unknown user name or bad password from client (Client name) ---
Error Code: 4097
This happens when a users account becomes locked or diasbled. Is there a
fix
for this in HIS 2000 SP2?
Doug
|
|
|
| Back to top |
|
|
Charles Ezzell (MSFT)
Guest
|
| Posted:
Fri Oct 14, 2005 12:51 am Post subject:
Re: Event ID: 705 |
|
|
Question is, do you want an unauthorized user accessing your network?
We have no control over your logging in or anything there. You would need to
contact Windows Support for help on that end. As far as we are concerned,
the OS is denying the account access. We are just reporting it. Again, no
control over it.
--
HTH,
Charles Ezzell
Microsoft
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Doug Hansen" <hansen@westpa.net> wrote in message
news:OTerwzE0FHA.2912@TK2MSFTNGP10.phx.gbl...
| Quote: | Charles and Neil,
I'm sure that part is working by design, but why would it be causing so
much havoc to the server? When it's happening, I can't ping or RDP to the
server, but I can log into it from a KVM switch. When I shutdown the the
PC that the user was using at the time (account disabled) or unlock the
user account (locked account), then I am able to ping or RDP to the
server.
"Doug Hansen" <dehansen@blair.com> wrote in message
news:eHfYhZA0FHA.916@TK2MSFTNGP10.phx.gbl...
Running HIS 2000 SP1 on W2K and get the following in the Sever Activity
Log:
Event ID: 705
Source: SNA SERVER
Description: Logon Failed
Explanation: Access denied on client-server or Distributed Link Service
request. Unknown user name or bad password from client (Client name) ---
Error Code: 4097
This happens when a users account becomes locked or diasbled. Is there a
fix
for this in HIS 2000 SP2?
Doug
|
|
|
| Back to top |
|
|
Neil Pike
Guest
|
| Posted:
Fri Oct 14, 2005 12:51 am Post subject:
Re: Event ID: 705 |
|
|
Doug,
HIS disallowing you access to a resource when it can't authenticate your
account (such as it's locked/disabled), is working as designed/required.
Why would you want it work differently?!?
(Or am I missing something - not firing on all cylinders today...)
| Quote: | Running HIS 2000 SP1 on W2K and get the following in the Sever Activity Log:
Event ID: 705
Source: SNA SERVER
Description: Logon Failed
Explanation: Access denied on client-server or Distributed Link Service
request. Unknown user name or bad password from client (Client name) ---
Error Code: 4097
This happens when a users account becomes locked or diasbled. Is there a fix
for this in HIS 2000 SP2?
Doug
|
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP |
|
| Back to top |
|
|
Neil Pike
Guest
|
| Posted:
Fri Oct 14, 2005 12:51 am Post subject:
Re: Event ID: 705 |
|
|
Doug - that's truly horrible. Some sort of domain authentication check is
locking up RPC's in some way. Though I wouldn't expect that to cause ping's to
fail - RDP yes, but not ping's. (You do have SP4 applied to W2K I assume?)
As well as you not being able to get to the server properly, does it affect
the usage of the server by the other HIS users?
Is the user concerned in the same domain as the HIS Server, or will the HIS
Server be going over a secure channel to it's domain controller to validate the
user details? (Is HIS a domain controller itself?). That DC would then have a
secure channel to the user's domain DC.
Possibly one of the domain controllers in that chain is misbehaving - you can
check the chain/secure channels using the NLTEST utility.
I've seen the error message you're seeing on a regular basis - e.g. locked
users, or users trying to connect from an untrusted domain. I've never had it
cause a service-related issue though.
I think you'll need an MS PSS case on this one. You might need to take
network traces (sniffer) of what the HIS server is (trying to) talking to when
the problem occurs. Maybe internal SNA traces as well.
Might be worth checking out KB828297, KB823273 and KB842382,
Or maybe Charles will be able to say this is a known issue in certain
circumstances......
| Quote: | I'm sure that part is working by design, but why would it be causing so
much havoc to the server? When it's happening, I can't ping or RDP to the
server, but I can log into it from a KVM switch. When I shutdown the the PC
that the user was using at the time (account disabled) or unlock the user
account (locked account), then I am able to ping or RDP to the server.
|
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP |
|
| Back to top |
|
|
Doug Hansen
Guest
|
| Posted:
Fri Oct 14, 2005 6:27 am Post subject:
Re: Event ID: 705 |
|
|
Neil,
SP4 has been applied and users are experiencing server access problems. We
only have one domain and the HIS is not a DC. I'm not familiar with NLTEST,
but I'll look into it, give it a whirl, look at the KB's and take some
traces as well. I also can't understand how or why a locked out\disabled
account can or is able to cause such a problem.
"Neil Pike" <neilpike@compuserve.com> wrote in message
news:VA.00006343.0a822c24@compuserve.com...
| Quote: | Doug - that's truly horrible. Some sort of domain authentication check is
locking up RPC's in some way. Though I wouldn't expect that to cause
ping's to
fail - RDP yes, but not ping's. (You do have SP4 applied to W2K I
assume?)
As well as you not being able to get to the server properly, does it
affect
the usage of the server by the other HIS users?
Is the user concerned in the same domain as the HIS Server, or will the
HIS
Server be going over a secure channel to it's domain controller to
validate the
user details? (Is HIS a domain controller itself?). That DC would then
have a
secure channel to the user's domain DC.
Possibly one of the domain controllers in that chain is misbehaving - you
can
check the chain/secure channels using the NLTEST utility.
I've seen the error message you're seeing on a regular basis - e.g. locked
users, or users trying to connect from an untrusted domain. I've never
had it
cause a service-related issue though.
I think you'll need an MS PSS case on this one. You might need to take
network traces (sniffer) of what the HIS server is (trying to) talking to
when
the problem occurs. Maybe internal SNA traces as well.
Might be worth checking out KB828297, KB823273 and KB842382,
Or maybe Charles will be able to say this is a known issue in certain
circumstances......
I'm sure that part is working by design, but why would it be causing so
much havoc to the server? When it's happening, I can't ping or RDP to the
server, but I can log into it from a KVM switch. When I shutdown the the
PC
that the user was using at the time (account disabled) or unlock the user
account (locked account), then I am able to ping or RDP to the server.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP
|
|
|
| Back to top |
|
|
Neil Pike
Guest
|
| Posted:
Fri Oct 14, 2005 4:51 pm Post subject:
Re: Event ID: 705 |
|
|
Doug,
| Quote: | SP4 has been applied and users are experiencing server access problems. We
only have one domain and the HIS is not a DC.
|
That simplifies matters greatly...
| Quote: | I'm not familiar with NLTEST,
but I'll look into it, give it a whirl
|
Look to see which domain controller has the secure channel for your HIS server
and check that server (as well as the HIS server) for any sign of problems in
the NT event log. Worth breaking and re-making the secure channel, preferably
to another DC, to see if that helps. If you're running over a WAN, then try
and force the secure channel to the nearest DC to your HIS server. You can
manually encourage this to happen by putting a "1C" static netbios domain entry
(or entries) into your lmhosts file to force Windows to try those listed
servers first when setting up the secure channel.
| Quote: | I also can't understand how or why a locked out\disabled
account can or is able to cause such a problem.
|
It certainly smacks of a bug/corruption. As Charles pointed out, this doesn't
smell like a HIS problem, it looks like an operating system/directory
services/domain type issue. As such the Microsoft Windows PSS folks are better
placed to help you debug it.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP |
|
| Back to top |
|
|
Doug Hansen
Guest
|
| Posted:
Tue Oct 25, 2005 4:51 pm Post subject:
Re: Event ID: 705 |
|
|
Has been turned over to Microsoft PSS folks. Will keep everyone posted.
"Neil Pike" <neilpike@compuserve.com> wrote in message
news:VA.00006346.0d8993db@compuserve.com...
| Quote: | Doug,
SP4 has been applied and users are experiencing server access problems.
We
only have one domain and the HIS is not a DC.
That simplifies matters greatly...
I'm not familiar with NLTEST,
but I'll look into it, give it a whirl
Look to see which domain controller has the secure channel for your HIS
server
and check that server (as well as the HIS server) for any sign of problems
in
the NT event log. Worth breaking and re-making the secure channel,
preferably
to another DC, to see if that helps. If you're running over a WAN, then
try
and force the secure channel to the nearest DC to your HIS server. You
can
manually encourage this to happen by putting a "1C" static netbios domain
entry
(or entries) into your lmhosts file to force Windows to try those listed
servers first when setting up the secure channel.
I also can't understand how or why a locked out\disabled
account can or is able to cause such a problem.
It certainly smacks of a bug/corruption. As Charles pointed out, this
doesn't
smell like a HIS problem, it looks like an operating system/directory
services/domain type issue. As such the Microsoft Windows PSS folks are
better
placed to help you debug it.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP
|
|
|
| Back to top |
|
|
Neil Pike
Guest
|
| Posted:
Tue Oct 25, 2005 8:51 pm Post subject:
Re: Event ID: 705 |
|
|
I'll be interested in the outcome!
| Quote: | Has been turned over to Microsoft PSS folks. Will keep everyone posted.
|
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in