| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 41820 | 2004-01-23 01:39:00 | Security audit failure; inability to login on XP | agent (30) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 209424 | 2004-01-23 01:39:00 | After installing the Microsoft .NET Framework on XP (well hey, I needed that to install WebMatrix ;)), I decided to reboot (just in case). Promptly after rebooting, and at the 'Welcome' login screen, Windows went into a kernel error screen, saying that it had failed to write to a security audit. The reason it did that is because I used the Local Security Policy to configure Windows so it would shutdown immediately if it was unable to log security audits. I hit the reset button on my computer, and it rebooted fine, with one exception. The only user that can now log on is the administrator (moi). All other users (irrespective of if they had a password or not, and the ones without a password are now asking for a password when clicked on), when attempting to log on, receive a popup on a black screen, reading something like the following. Logon Message "Your account is configured to prevent you from accessing this computer. Please try another computer." I didn't do anything that would cause this aside from installing WebMatrix (a WYSIWYG editor for creating ASP.NET pages) and the .NET Framework, which WebMatrix requires. I'm at a loss as to what would have caused this, because it has also happened on another XP computer I use - except that doesn't have WebMatrix or the .NET Framework installed on it. They only similar configurations would be the security policies (which I doubt would be exactly the same, because I configured one from memory of what I did on the other - bearing in mind the 'shutdown if unable to log security audits' is enabled on both computers) and the fact that both computers were unable to log a security audit before this happened. I cannot remember if the other computer locked me out of my normal account (Power User) upon the next reboot after the security audit failure. On both computers I have checked NTFS permissions for the folders where profiles are stored, checked the Local Security Settings to make sure the user groups are allowed to logon and aren't denied to logon, and I've made sure that any accounts aren't locked out (except the guest account, of course). I don't know if it is relevant, but on both computers I also deleted the built in support[random characters] account and the remote login account, as I view these as unneccessary and safe to remove. Google didn't turn up any results for the logon message I receive, so I'm at a complete loss as to what to do. |
agent (30) | ||
| 209425 | 2004-01-23 01:48:00 | Agent, I'm guessing the security policies are not quite what you expect, however have a look at this MS KB article MS KB (support.microsoft.com) and see if that information is of help. Cheers, Babe. |
Babe Ruth (416) | ||
| 209426 | 2004-01-23 01:53:00 | Agent, here is another MS KB article for you MS KB (support.microsoft.com) Cheers, Babe. |
Babe Ruth (416) | ||
| 209427 | 2004-01-23 03:08:00 | Thanks for that, I fixed it with the information from the first KB article :D I don't know if my problems were caused by the audit reaching it's maximum size without being able to overwrite previous entries, but I changed all the audits so they now overwrite previous entries as required. Hopefully that'll sort things out. I haven't tried it on the other computer yet, but hopefully that will work too - though I'm quite sure as standard setup I tell the audits to overwrite as needed. |
agent (30) | ||
| 209428 | 2004-01-23 05:12:00 | Agent, Great that's cool. I suspect you are right. Anyway fixed for now Cheers, Babe. |
Babe Ruth (416) | ||
| 209429 | 2004-01-23 05:15:00 | Well it was secure, wasn't it? :D | Graham L (2) | ||
| 1 | |||||