MSExchangeTransport 1020 'NT AUTHORITY\ANONYMOUS LOGON - How can I identify Client?

My Exchange 2010 box is logging this error with some regularity:
MSExchangeTransport
1020
The account 'NT AUTHORITY\ANONYMOUS LOGON' provided valid credentials, but is not authorized to use the server; failing authentication.
How can identify what client is attempting this connection?

Hi,
If there is no event id 1035, I recommend you use protocol logs with log parser to check the sender IP. Also, you can use network monitor to verify this client's IP address.
Here is a helpful article for your reference.
Report Top Sender IP’s on Exchange Server 2010 using Log Parser
http://exchangeserverpro.com/exchange-2010-report-top-sender-ips-log-parser/
Note: Microsoft is providing this information as a convenience to you. The site is not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
Hope it helps.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Similar Messages

BizTalk Powershell Provider Mount remote BizTalk drive: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'

I've been dabbling in the Powershell BizTalk Provider Extensions for some automation of deployment and such. So far it's pretty cool on a local machine, but the real benefits to me would be to do it remotely. Does anyone have any experience in the with the
following issue?
My BizTalk Server and SQL Servers are on separate machines which I think is the issue, but I don't know how to resolve. I've tried to provided credentials to the New-PSDrive command, but get the following errors:
The provider does not support the use of credentials. Perform the operation again without specifying credentials.
I'm trying to manage a remote BizTalk instance. The machine running the script has biztalk fully configured and can connect
to the Target Server just fine. The issue comes when I try to mount the "BizTalk:" drive
Enter-pssession -computername myServer -configurationname microsoft.powershell32
$InitializeDefaultBTSDrive = $false;
Remove-PSSnapin -Name BizTalkfactory.PowerShell.Extensions;
Add-PSSnapin -Name BizTalkfactory.PowerShell.Extensions;
New-PSDrive -Name BizTalk -PSProvider BizTalk -Root "BizTalk:\" -Instance mySqlServer -Database BizTalkMgmtDb -Scope Global
When it get to the New-PSDrive I get the following error:
New-PSDrive : Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
+ CategoryInfo : InvalidArgument: (BizTalk:PSDriveInfo) [New-PSDrive], BtsException
+ FullyQualifiedErrorId : 0,Microsoft.PowerShell.Commands.NewPSDriveCommand
Has anyone experienced this and solved? The same error occurs when use Invoke-Command as well.

It seems that the PowerShell provider is not Microsoft Support, it is community supported through the CodePlex site -
http://psbiztalk.codeplex.com
Right, I posted there as well, but there is not much movement on the site. I was hoping to find if this larger community may have had some experience with the provider.

SqlException was caught: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

Hi,
I have deployed an On-Premise SharePoint solution with event receiver to update external SQLDB. I'm using Visual Studio 2013 to create a SharePoint 2013 project on the same machine where SharePoint 2013 server is running. I was able to create
new items, but unable to update/delete. My event were fired accordingly however got choked on sqlConnectionlOpen() when attempting to update/delete with the following exception:
SqlException was caught: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Why would SharePoint uses SharePoint web application account my admin created to create and assumes NT AUTHORITY\ANONYMOUS LOGON account for update\delete? Any idea how to fix?
Appreciate your help.

I'm new to SharePoint development. I'm not familiar with SharePoint object model. Do I need to use it for working with external data? I used SPSecurity.RunWithElevatedPrivileges
block like you have suggested and is now working fine for both update/delete =)
My project is to develop a SharePoint site to work off external SQL DB. I tried BCS approach to work with external data but that didn't allow workflow/task feature.
Besides, there is no delete event where I can manually sync with external data when an item gets deleted when using SharePoint 2013 Designer. So using event receiver with SharePoint solution in VS2013 is the solution. Now that I am able to
propagate changes to external data store on item events, the new challenge is how do I over come SharePoint deployment conflict resolution (default? enforcement?) as each publish automatically deletes existing items in my lists and recreate? In another word,
I'm trying to replicate SharePoint list to external data store each transaction to keep them sync. Any thought would be greatly appreciated.

Reporting Services - NT AUTHORITY\ANONYMOUS LOGON

Folks:
We have a report which runs fine if in our data souce we select 'Credentials stored securely in the report server' and set a windows account. Our requirement is to use 'Windows Integrated Security' so the report runs using the logged in users credentials. For
some reason when I select the 'Windows Integrated Security' option the report runs under 'NT AUTHORITY\ANONYMOUS LOGON' account. Is there any setting I need to set on the server or domain so that the report will run using the logged in users credentials?
Our environment:
We have Reporting Services 2008 R2 on SERVER A and the Report Server Databases on SERVER B. The reporting services service is running using a domain admin account.
Thanks !

Hello,
It may be a double hop issue, and we can resolve this issue by implementing Kerberos.
If we want using Windows integrated credentials for external data sources we need configure Windows Authentication using Kerberos. Windows Authentication using NTLM or Forms authentication is not support it. Please refer to the article about Configure Windows
Authentication in Reporting Services.
http://msdn.microsoft.com/en-us/library/cc281253(v=sql.105).aspx
Hope this helps.
Regards,
Alisa Tang
Alisa Tang
TechNet Community Support

Exception Message: The form cannot connect to the data source. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'

When opening a form in SharePoint 12013 that was created from Infopath 2013, I get the following error.
You do not have permissions to access a database that contains data required for this form to function correctly.
An entry has been added to the Windows event log of the server.
Log ID:5566
When I go to the log files on the SharePoint server. I see the following error.
Exception Message: The form cannot connect to the data source. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
I am guessing this has something to do with the UDCX connection and the database.
Can anyone help me get this fixed?

Hi Jim,
Please check the following kb article when it occurs 5566errro with the UDCX conection file, try the method of using the Secure Store Service to store alternate credentials for the data connection method, or the method of stating the credentials
in the UDC file explicitly.
Also check if it could help with setting sql server as "SQL Server and Windows Authentication mode".
http://support.microsoft.com/kb/981684
Thanks
Daniel Yang
TechNet Community Support

Integrated Security results in Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' after code deployment

Sometimes, when we deploy new code to the server, we're getting the following error:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
we're using windows authentication and in our connectionstring use integrated security.
Only after restarting the server, the application can connect to the DB again. restarting IIS or recycling the application pool doesn't help.
Our application pool is configured using ApplicationPoolIdentity and we would like to keep it as such.
Any idea what we can do to prevent this error from occurring almost every time we deploy code?
Thanks

Hi amisol,
Thanks for your post here.
For your issue is related with asp.net security ,i suggest that you can post your issue to the link below:
http://forums.asp.net/25.aspx/1?Security
Best Regards,
Kevin Shen.

WinRS running as 'NT AUTHORITY\ANONYMOUS LOGON' instead of passed in user

I am trying to run a remote batch file using local environment variables. To do so, I am calling cmd.exe within cmd.exe to evaluate the local environment variable within the command string.
For example: WinRS -r:DEV002 cmd.exe /c "cmd /c "^%EPDIR^%\tags\2.3.0\utils\batch\epSetup.bat" -r machine "
When this runs, it calls the correct batch file, but it fails with:
Unhandled Exception: System.Data.EntityException: The underlying provider failed on Open. ---> System.Data.SqlClient.SqlException: Login failed for user '
NT AUTHORITY\ANONYMOUS LOGON'.
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
Is there another approach I can take to execute this batch file under the correct impersonated credentials?
Thank you,
Michael
MSDN premium subscriber

I have simplified the command line to: WinRS -r:DEV002 -d:^%EPDIR^%\tags\2.3.0\utils\trna\epsetup\bin\debug epSetup.exe -r machine
This fails with the same error. Injecting my username via the -u command also fails.
I am trying to not use psexec but without real impersonation, it won't fly.
MSDN premium subscriber

Repoting Server Error "NT AUTHORITY\ANONYMOUS LOGON'".

Hello,
We have windows 2008R2 on all systems. Server A is the reporting server, ServerB is the SQL (DB Server) , Server C is another client the we connect via web to reporting server.
From Server A to B getting reports works fine.
From Server C getting reports we get a error "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
We have done everything that needs to be done when there are two hops....
http://blogs.msdn.com/b/sql_protocols/archive/2006/08/10/694657.aspx
But still it is not working. What we dont understand is that when we arrive in the morning it works again. We the reboot the reporting server or restart the service...after that we get the error again....Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Following SPNs are registered:
SQL SSRS on Server A (Delegation to any Server enabled)
HTTP/SERVERA
HTTP/SERVERA.domain.ch
HTTP/SERVERA.domain.ch:85 (because SSRS Site running on Port 85)
HTTP/SERVERA:85 (because SSRS Site running on Port 85)
SQL SSAS on Server A (Delegation to any Server enabled)
MSOLAPSvc.3/Cluster_Instance:SQL_Instance:1433
MSOLAPSvc.3/Cluster_Instance:SQL_Instance
MSOLAPSvc.3/Cluster_Instance.domain.ch:SQL_Instance:1433
MSOLAPSvc.3/Cluster_Instance.domain.ch:SQL_Instance
Why?
Can someone help?
Thanks

Still issue persists?
Regards, Pradyothana DP http://www.dbainhouse.blogspot.in/ Please Mark This As Answer if it solved your issue.

SSIS 2012 - NT AUTHORITY\ANONYMOUS LOGON failure

I have a SSIS package which I have deployed to the Integration Services Catalog. When I execute the package it fails on validation of the destination database with the :
SSIS Error Code DTS_E_OLEDBERROR. An OLE DB error has occurred. Error code: 0x80040E4D.
An OLE DB record is available. Source: "Microsoft SQL Server Native Client 11.0" Hresult: 0x80040E4D Description: "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.".
This package is attempting to connect to a database on a different server running with windows authentication.
For the Integration Services DB, where my package is deployed, the database (SSISDB) service runs under a user which has permission on the destination db on the other server. I thought that this would mean when the package is run, this user would
be used for windows authentication. I'm not sure why it's trying to use: NT AUTHORITY\ANONYMOUS LOGON to connect, as this is not specified anywhere.
Does anyone know how to fix this?

Hi Andrew, looks like you are right. It appears due to the double-hop here we have to set up kerberos delegation.
This is a headache for us and it's a shame it doesn't work out of the box. Obvious work around is to use SQL authentication, but that is not an option for us.
I would say this is a major issue - previous versions didn't need this extra setup to be able to do something which is quite straightforward.
Connect links are found
here and
here. Further description of the problem is
here

NT AUTHORITY\ANONYMOUS LOGON

Hello everybody,
I have this scenario. We on application server and sql server
Web application server contains following thinks:
IIS 7.0
Windows Server 2008
ASP.net 2.x
Sql server:
Windows Server 2008
SQL Server 2008
My web application uses following connection string:
<add name="AdventureWorksDW2008" providerName="System.Data.SqlClient" connectionString="Data Source=xxx.xx.xx.xx;Initial Catalog=databasename;Integrated Security=SSPI;
I got this error message:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Data.SqlClient.SqlException: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[SqlException (0x80131904): Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.]
Geospatial.Data.DALMap.GetCountries() in C:\Project\old\Geospatial Framework\Geospatial Framework\Geospatial Framework\Data\DALMap.cs:29
Geospatial_Framework.DispersionMap.PopulateCountries() in C:\Project\old\Geospatial Framework\Geospatial Framework\Geospatial Framework\DispersionMap.aspx.cs:54
Geospatial_Framework.DispersionMap.Page_Load(Object sender, EventArgs e) in C:\Project\old\Geospatial Framework\Geospatial Framework\Geospatial Framework\DispersionMap.aspx.cs:28
System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) +25
System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) +42
System.Web.UI.Control.OnLoad(EventArgs e) +132
System.Web.UI.Control.LoadRecursive() +66
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +2428
Version Information: Microsoft .NET Framework Version:2.0.50727.4927; ASP.NET Version:2.0.50727.4927 
NT AUTHORITY\ANONYMOUS LOGON'
SQL Server sql logs contains following think:
2010-01-04 13:40:52.64 Logon Error: 18456, Severity: 14, State: 11.
2010-01-04 13:40:52.64 Logon Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: xxx.xxx.xx.xx]
Can anyone help me ?
Jouni

Hello Jouni,
In your connection string you are using Integrated Security and your web application is trying to connect with ANONYMOUS LOGON. You can change those settings in ISS Manager -> Your site properties -> Directory Security -> Authentication and access control -> Uncheck "Enable anonymous access" and check "Integrated Windows authentication".
That would work if users access your application are authenticated to sql server domain.
You can also switch your application to use SQL Server authentication or can run your web application in an Application Pool with windows account configured to access SQL Server.
Also, your web application server should be in the same or trusted domain with your SQL Server if you want to use Windows Authentication.
Hope that helps.
Akim

Linked Server error: Login Failed for user 'NT AUTHORITY\ANONYMOUS LOGON' between sql server 2005 32 bit and sql server 2012 64 bit

Hi All,
Here the linked server is created between sql server 2012 64 bit and sql server 2005 32 bit. I am getting the below error when i try to access linked server from third server. I have created linked from Instance 1 to Instance 2. When i access it from
instance 3 i am getting the below error. SPN setting has been done between these 2 servers. Also the option 'Trust the delegate' is enabled for the both the service account.
'Login Failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
Appreciate your quick response.
Vikas.M.S

Hello,
Please read the following resources:
http://www.databasejournal.com/features/mssql/article.php/3696506/Setting-Up-Delegation-for-Linked-Servers.htm
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/ea26de43-4c6b-4991-86d7-e1578f107c92/linked-server-login-failed-for-user-nt-authorityanonymous-logon?forum=sqldataaccess
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Event 3351, SQL database login for 'DB_Config' on instance failed. Additional error information from SQL server is mentioned below. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

category-database
event id-3351
source-sharepoint foundation
SQL database login for 'DB_Config' on instance 'DB\instance' failed. Additional error information from SQL Server is included below:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
I have been getting this error every hour on only 1 application server of the 2.
My farm consists of 2 app servers, 2 wfes & 2 sql nodes.
My public site is working fine. Authentication is NTLM.
SharePoint VSS Writer is disabled.None of my appPool accounts are running under local system.
I have read many forums/blogs, but couldnt find a solution for this.
Any help would be appreciated!

Hi,
As I understand, you found event id 3351 in event log. Please collect more information as below：
Check if the error also occurs on other servers in your farm.
Check if backup job is scheduled at the time when the event id occurs.
Please run Config Wizard or psconfig.exe -cmd secureresources on all servers and test the issue again.
Regards,
Rebecca Tu
TechNet Community Support

WCF-SQL Adapter Login fail 'NT AUTHORITY\ANONYMOUS LOGON

Hi,
I am have three WCF-SQL receive with WCF-SQL Adapater and two are working fine but the third one is giving the following warning in the Eventlog. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
I really appreciate your help.
thanks
Ram
---------------Warning written to EventLog ---------------
The adapter "WCF-SQL" raised an error message. Details "Microsoft.ServiceModel.Channels.Common.AdapterException: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.. Endpoint Address - mssql://txhubdb//switch_mailbox_RX2?
---> System.Data.SqlClient.SqlException: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
at System.Data.SqlClient.SqlDataReader.TryConsumeMetaData()
at System.Data.SqlClient.SqlDataReader.get_MetaData()
at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite, SqlDataReader ds)
at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean asyncWrite)
at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)
at System.Data.SqlClient.SqlCommand.ExecuteXmlReader()
at Microsoft.Adapters.Sql.ExecutionHelper.ExecuteXmlReader(SqlCommand sqlCommand, Double totalSeconds)
at Microsoft.Adapters.Sql.SqlAdapterInboundHandler.Polling_TryReceive(TimeoutHelper timeoutHelper, Message& wcfMessage)
at Microsoft.Adapters.Sql.SqlAdapterInboundHandler.TryReceive(TimeSpan timeout, Message& message, IInboundReply& reply)
--- End of inner exception stack trace ---
at Microsoft.ServiceModel.Channels.Common.Channels.AdapterInputChannel.EndTryReceive(IAsyncResult result, Message& message)
at System.ServiceModel.Dispatcher.InputChannelBinder.EndTryReceive(IAsyncResult result, RequestContext& requestContext)
at System.ServiceModel.Dispatcher.ErrorHandlingReceiver.EndTryReceive(IAsyncResult result, RequestContext& requestContext)".

1) Do you have the same Credentials settings for all 3 Receive Locations (Found under Configure | Other | Credentials on you WCF-SQL Adapter)
2) Are all 3 Receive Locations Locations polling from the same SQL Server? If not are they then on the same domain? If the server that is failing is not on the same domain as your BizTalk Host User, then you might need to supply credentials and use a local
SQL User.
Morten la Cour

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

Trying to get an admin type report working from the server. Works fine when I run it from BIDS since I have all the associated permissions. The report connects to multiple databases on different servers. The servers have links between them,
that is not the issues. I think I would have to change the security settings on the report server itself.
I read the similar posts, but didnt see any mention of verifying the security settings on Report Server itself, in IIS. In my case the web site that the Report Server app is under, has "Allow Anonymous" checked, but not on the app. So
I think that as I hit the url, my credentials are not being carried through. When I browse the report locally on the server, i get
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Im using integrated windows security for my data sources.

Actually, I think its an issue of Kereros authentication not being enabled for some of the servers that are being referenced in the datasets of the report.
http://blogs.msdn.com/b/sql_protocols/archive/2005/10/12/479871.aspx

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. when open external list

Hi
i created a external list based on a external content type in shaepoint designer
but i got this error in event viewer when i open this list
Could not open connection using 'data source=xxxx;initial catalog=xxx;integrated security=SSPI;pooling=True;persist security info=false' in App Domain '/LM/W3SVC/1756231635/ROOT-1-130330475307091531'. The full exception text is: Login failed for user 'NT
AUTHORITY\ANONYMOUS LOGON'.
I created bcs service with Users Identity and my web application using claims based authentication
and sql server in seperate server under a domain.
all servers are in same domain
adil

Most likely you are running into double-hope issue.
Read following article and implement the workaround that works for you.
http://www.spdoctor.net/Pages/message.aspx?name=login-failed-for-user-bdc
I am assuming your are using NTLM in your farm. If you are using Kerberos then check the following article.
http://blogs.technet.com/b/harmeetw/archive/2011/08/28/getting-login-failed-for-user-nt-authority-anonymous-logon-when-browsing-external-list-on-a-claims-kerberos-web-application.aspx
Amit

MSExchangeTransport 1020 'NT AUTHORITY\ANONYMOUS LOGON - How can I identify Client?

Similar Messages

Maybe you are looking for