Error: Users Cannot Log On to a Workstation

ID: Q160783

The information in this article applies to:

SYMPTOMS

The following message is displayed when logging on to a domain using a non-Administrative account from a workstation.

Windows NT

Your account is configured to prevent you from logging on and using this workstation. Please try another workstation.

Other clients

The user is not allowed to log on from this workstation.
Depending on the client, the associated network message number, 2240, may also be included with the above message.


CAUSE

This message will be displayed if the user account is configured to log on from specific workstations. To set this option, select User Properties and click the "Logon To" button.

This message will also be displayed if the Windows NT Resource Kit utility, C2 Configuration Manager (C2Config.exe) has been run on the validating server and the "Halt on Audit Failure" security feature is enabled.

When the Security Log size reaches capacity, only Administrators will be able to access the server.


RESOLUTION

To resolve this issue, an Administrator should clear the Security Log and run C2CONFIG to reset the CrashOnAuditFail value.

For additional information, please see the following articles in the Microsoft Knowledge Base:

ARTICLE-ID: Q140058
TITLE : How To Prevent Auditable Activities When Security Log Is Full

ARTICLE-ID: Q149393
TITLE : CrashOnAuditFail Activates on Shutdown with ProcessTracking


STATUS

Microsoft has confirmed this to be a problem in Windows NT version 3.5x and 4.0. We are researching this problem and will post new information here in the Microsoft Knowledge Base as it becomes available.

Additional query words: permit access policy registry 


Keywords          : kberrmsg ntdomain ntsecurity kbbug4.00 kbbug3.50 kbbug3.51 ntconfig ntreskit NTSrvWkst ntutil 
Version           : WinNT:3.5,3.51,4.0;Win95;WFW3.11;LM2.2c
Platform          : winnt 
Issue type        : kbbug

Last Reviewed: February 2, 1999