Unable to logon with domain account - not the usual

[Myles Kelly]

Very frustrated by this, would like some help on how to diagnose the
problem.

Project server is installed fine, user accounts created for
administrator (SQL), mydomain\UserA (Windows, my user account),
mydomain\UserB (Windows), UserC (SQL)

When I log on from my my machine (WindowXP) logged on as
mydomain\UserA (myself) I get the /projectserver/lgnps.asp logon
screen rather than being logged straight through, if I put my username
/ password in I get the

"You have entered an incorrect user name/password combination. (5002)"

Screen.

However if I log on from MY PC as mydomain\UserB then try, it goes
straight through, entering in UserC also works.
To make it more frustrating if I log in on ANOTHER PC as
mydomain\UserA, I go in fine.

I have removed project server and reinstalled, then recreated my
Project ServerID, same problem.

How can I diagnose this problem?

Thanks for any help

Myles

 

[Gary L. Chefetz [MVP]]

Myles:

Two possibilities: Your UserA profile on the first machine has unique
characteristics, most likely in security setup, that prevents it from
passing the correct credentials or the profile, itself, has become
corrupted. Try renaming the user profile on the first machine which causes
it to be recreated when you next login as that user. If that solves the
problem, migrate the profile components you care about.

 

[Myles Kelly]

Thanks for the feedback, it seems like the right idea, but I'm afraid
it did not work (I created a local admin account, logged on, deleted
my profile, logged off / back on again)
Should the loggon failure with mydomain\username be logged somewhere?

Myles Kelly

 

[Gary L. Chefetz [MVP]]

Myles:

If the problem isn't a corrupt profile, then it's most likely related to
security settings in the browser under your profile.

 

[Myles Kelly]

Thanks Gary, I had been through these settings with a fine tooth
coomb, and they are the same on the workstation I can log in on, as
the one I cannot.

I switched on local auditing on the server (previously I was only
looking at IIS and SQL logs and saw this behaviour.

From 'OK' workstation

Success Audit 11/05/2004 08:23:07 Security Privilege Use 576 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:23:03 Security Logon/Logoff 540 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:23:03 Security Privilege Use 576 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:23:01 Security Logon/Logoff 538 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:23:01 Security Logon/Logoff 538 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:23:01 Security Logon/Logoff 540 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:23:01 Security Privilege Use 576 myuserid
PROJECT-SRV


From 'Bad' Workstation
Success Audit 11/05/2004 08:27:31 Security Object Access 560 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:26:08 Security Logon/Logoff 538 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:24:48 Security Object Access 562 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:24:48 Security Object Access 560 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:24:31 Security Logon/Logoff 538 myuserid
PROJECT-SRV
Success Audit 11/05/2004 08:24:31 Security Logon/Logoff 540
ProjectAdmin PROJECT-SRV
Success Audit 11/05/2004 08:24:31 Security Privilege Use 576
ProjectAdmin PROJECT-SRV
Success Audit 11/05/2004 08:24:31 Security Account Logon 680
ProjectAdmin PROJECT-SRV


i.e. when I click the ...\lgnint.asp link from the bad workstation,
ProjectAdmin attempts to log on first. This implies it is cached
somewhere, but where? (I have cleared browser cookies / files /
autocomplete / passwords)

very, very frustrating, especially as this is holding up my pilot for
a very trivial item)

 

[Myles Kelly]

Btw IIS logs show the same behaviour
IIS Logs (sorry if wrapping makes this look terrible)
'Good' workstation
11/05/2004 07:23:01 192.168.50.207 GET /projectserver - 80 - 192.168.51.249 401 1 0
11/05/2004 07:23:01 192.168.50.207 GET /projectserver - 80 mydomain\myuserid 192.168.51.249 301 0 0
11/05/2004 07:23:01 192.168.50.207 GET /projectserver/LGNINT.ASP - 80 mydomain\myuserid 192.168.51.249 302 0 0

'Bad' Workstation
11/05/2004 07:24:31 192.168.50.207 GET /projectserver/lgnint.asp - 80 - 192.168.50.190 401 2 2148074254
11/05/2004 07:24:31 192.168.50.207 GET /projectserver/lgnint.asp - 80 - 192.168.50.190 401 1 0
11/05/2004 07:24:31 192.168.50.207 GET /projectserver/lgnint.asp - 80 PROJECT-SRV\projectadmin 192.168.50.190 302 0 0
11/05/2004 07:24:31 192.168.50.207 GET /projectserver/lgnps.asp - 80 PROJECT-SRV\projectadmin 192.168.50.190 200 0 0

 

[Myles Kelly]

Resolved!
noticed in IIS logs 'bad' browser was
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1)
'good' browser
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322)

i.e. my browser did not have .NET framework installed. I did not
realise this was a requirement, but applied, booted and works fine
now.

Thanks for your help Gary, just having someone to bounce ideas off
makes a huge difference.

Myles