Err: Users Cannot Log On to a Workstation

• Microsoft Windows NT Workstation versions 3.5, 3.51, and 4.0
• Microsoft Windows NT Server versions 3.5, 3.51, and 4.0
• Microsoft LAN Manager version 2.2c
• Microsoft Windows for Workgroups version 3.11
• Microsoft Windows 95
• Microsoft Network Client version 3.0 for MS-DOS

SYMPTOMS

The following message is displayed when logging on to a domain using a non-Administrative account from a workstation.

Windows NT

Your account is configured to prevent you from logging on and using this workstation. Please try another workstation.

Other clients

The user is not allowed to log on from this workstation.

Depending on the client, the associated network message number, 2240, may also be included with the above message.

CAUSE

This message will be displayed if the user account is configured to log on from specific workstations. To set this option, select User Properties and click the "Logon To" button.

This message will also be displayed if the Windows NT Resource Kit utility, C2 Configuration Manager (C2Config.exe) has been run on the validating server and the "Halt on Audit Failure" security feature is enabled.

When the Security Log size reaches capacity, only Administrators will be able to access the server.

RESOLUTION

To resolve this issue, an Administrator should clear the Security Log and run C2CONFIG to reset the CrashOnAuditFail value.

For additional information, please see the following articles in the Microsoft Knowledge Base:

   ARTICLE-ID: Q140058
   TITLE     : How To Prevent Auditable Activities When Security Log Is
               Full

   ARTICLE-ID: Q149393
   TITLE     : CrashOnAuditFail Activates on Shutdown with ProcessTracking

STATUS

Microsoft has confirmed this to be a problem in Windows NT version 3.5x and 4.0. We are researching this problem and will post new information here in the Microsoft Knowledge Base as it becomes available.