Active Directory Users Any Computers User option logon to

Forums › Microsoft Windows › Active Directory Users Any Computers User option logon to

camo786

154 posts

Master Geek

Lifetime subscriber

#40832 4-Sep-2009 16:52

I have a weird problem that maybe someone can give me some ideas where to look

symptom: User on and AD domain cant logon to their computer system advises they don't have permission to login

upon investigation discover setting in AD user tab specify which computer they can login too lists all the servers, install of ALL computers

Promptly change the to all computers but some time later it reverts back to the list of servers and I have to change it again to get he user logged on

Anyone got any suggestions on resolving

gehenna

7963 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#253284 4-Sep-2009 17:59

Wast the user account created from scratch, or copied from an existing user? Is the user part of any groups that might have domain admin rights? If they're in a group, are there any group policies that might be messing with the user account?

If all else fails you can try disabling the account and recreating it from scratch (assuming it was a copied account in the first place)

GoodSync

GoodSync. Easily back up and sync your files with GoodSync. Simple and secure file backup and synchronisation software will ensure that your files are never lost (affiliate link).

camo786

154 posts

Master Geek

Lifetime subscriber

#253576 6-Sep-2009 17:34

For the new user I created from scratch, same thing happened

There are some users this doesnt happen for, compared groups and made my test user exactly same, problem still occurs

There are no changes to Group Policy (everything default settings) so I dont think its anything to do with Group Policy

Any other ideas?

Adamal

544 posts

Ultimate Geek

#253804 7-Sep-2009 17:35

Run a Resultant of Policy check on them just to be sure.

engedib

253 posts

Ultimate Geek

#259057 28-Sep-2009 17:40

You do not have enough CAL's installed on the server.
The server resets the computer accounts for the user every 180 minutes when there is a lack of CAL's

MCSE+M/S, MCITP

nathan

5695 posts

Uber Geek
Inactive user

#261196 5-Oct-2009 13:42

engedib: You do not have enough CAL's installed on the server.
The server resets the computer accounts for the user every 180 minutes when there is a lack of CAL's

really?

What Windows operating system does CAL tracking like this?

camo786

154 posts

Master Geek

Lifetime subscriber

#261234 5-Oct-2009 14:17

He was spot on with diagnosis, EBS 08 works like this, and nothing in event viewer to suggest licencing is an issue

nathan

5695 posts

Uber Geek
Inactive user

#261254 5-Oct-2009 14:52

camo786: He was spot on with diagnosis, EBS 08 works like this, and nothing in event viewer to suggest licencing is an issue

Hey Camo, next time mention what operating system you're on like our AD is using Essential Business Server 2008. Makes troubleshooting a bit easier to grok if you have all the info. EBS 2008 is the only Windows Server product that tracks and enforces CALs as far as I know

Its weird that EBS didn't tell you about running out of CALs, as the details about CALs appears in License Management on the Licenses tab in the Windows EBS Administration Console.

There is also events logged to the operational event log on the Management Server (under Microsoft-Windows-Windows Server Solutions Client Access Licensing/Operational log)

We are actually looking at how we handle CALs and licensing enforcement in Essential Business Server 2008 R2 which we're planning and building at the moment

Cheers
Nathan
Microsoft NZ

camo786

154 posts

Master Geek

Lifetime subscriber

#261262 5-Oct-2009 15:04

Thanks in hindsight OS version would have been useful

So many event logs to look at now :(

And there with SBS03 there were 3 or 4 ways of doing things, now with SBS/EBS08 there are like 20 different ways of doing things

Feels like 2 many choices, means too complicated, and so much more can go wrong

Woops venting and slightly off topic :)