Vlan depend on user account

i`m asking, is possible to assign  the vlan depend on user account 
i have a lot of sub nets and i need to link between user account  and vlan,
the current solution  is to divide the vlan on switches 

You can do this with Windows server and NPS server.  Here are some attributes you can send over from NPS server to make this happen:
http://technet.microsoft.com/en-us/library/cc754422%28v=ws.10%29.aspx
Also, you will need the switches configured like this as well:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/sw8021x.html#wp1207975
I hope that helps.  Its certainly not a simple undertaking when using 802.1x but that is the best way to do it by user.
Be user to rate if this is helpful!

Similar Messages

  • VLAN depend on user credentials

    Hi all
    We have plan to implement Cisco WiFi controller 2504 with APs 1602.
    In the network there is the ACS server.
    The goal is to authenticate users, and depend on users credentials AP/WLC will deploy appropriate VLAN.
    For example
    Guest user will be pushed in the VLAN100, corporate users will get VLAN 10...
    Does it possible with equipment we have/will have:
    ACS server
    WLC: AIR-CT2504-50-K9
    AP: AIR-CAP1602E-EK910
    If not, what we need to implement our request?
    Thanks

    You can look at dynamic vlan assignments using AAA override on the WLC. However, if your using WebAuth/captive portal for guest, you can't change their vlan. This is a layer 3 authentication so it requires the device to have an IP address prior to hitting the portal page. For other authentication methods, has to be 802.1, you can do that.
    Sent from Cisco Technical Support iPhone App

  • Unable to log in to the user account [username] at this time

    My Powerbook G4 is running Mac OS X 10.4.11
    Processor: 1.5 GHz PowerPC G4
    Memory: 768 MB DDR SDRAM
    Startup Disk Macintosh HD
    Serial # 4H511OAJRJ5
    Capacity 74.4 GB
    Available: 2.3 GB
    My problems began when I had a warning message that read something like, “your startup disk is getting full. Delete some files”
    Around the same time my battery was showing signs of being spent (wouldn’t take a full charge) and would shutdown my powerbook in the middle of operation. I replaced the battery within 12 hours, rebooted, and everything seemed normal; I could log in and access all programs, files, photos, music, etc. The error message reappeared to deletes some files. I ran TechTool Deluxes and it suggested repairing my Volume Directory. There were a few suggestions in green and one in red. I accepted the ones in green and made the changes. It reopened TechTool and ran again, this time everything showed up as a “red” (drastic) directory change. I did not accept. I shut down. I rebooted, and that is when my heart sank.
    My account log in screen appeared (I have my master account and a “test” account available) and I entered my log in password. After several moments, the message “You are unable to log in to the user account [username] at this time.” I can log in to my “test” account but I have not been able to access any of my files from that account. Also, my Test account appears to be running Panther instead of Tiger; could that be? Anyway, I read some similar problem posts here and was hopeful that DiskWarrior could help restore me. I purchased and ran it successfully (at least DiskWarrior said it was a success) but I still have the same results.
    I tried to access both my caches folder and my Desktop folder from my “test” account, but these are the error messages I received:
    The folder “Caches” could not be opened because you do not have sufficient access privileges.
    The folder “Desktop” could not be opened because you do not have sufficient access privileges.
    I was shocked to see my Available space was only 2.5 GB. I don’t know how that can be right.
    I’m open to anything to retrieve my files – Any suggestions?

    Around the same time my battery was showing signs of being spent (wouldn’t take a full charge) and would shutdown my powerbook in the middle of operation. I replaced the battery within 12 hours, rebooted, and everything seemed normal; I could log in and access all programs, files, photos, music, etc. The error message reappeared to deletes some files.
    You need to delete some file not try to repair the disk volume. but anyway...
    I ran TechTool Deluxes and it suggested repairing my Volume Directory. There were a few suggestions in green and one in red. I accepted the ones in green and made the changes. It reopened TechTool and ran again, this time everything showed up as a “red” (drastic) directory change. I did not accept. I shut down. I rebooted, and that is when my heart sank.
    You need to develop a full backup plan. Get an external hd and backup to it.
    My account log in screen appeared (I have my master account and a “test” account available) and I entered my log in password. After several moments, the message “You are unable to log in to the user account [username] at this time.”
    Would you be using filevault? Which would mean you need more space.
    I can log in to my “test” account but I have not been able to access any of my files from that account. Also, my Test account appears to be running Panther instead of Tiger; could that be?
    Doubtful. What does apple > about this mac say?
    Anyway, I read some similar problem posts here and was hopeful that DiskWarrior could help restore me. I purchased and ran it successfully (at least DiskWarrior said it was a success) but I still have the same results.
    I tried to access both my caches folder and my Desktop folder from my “test” account, but these are the error messages I received:
    The folder “Caches” could not be opened because you do not have sufficient access privileges.
    The folder “Desktop” could not be opened because you do not have sufficient access privileges.
    Which desktop folder? these are normal messages.
    I was shocked to see my Available space was only 2.5 GB. I don’t know how that can be right.
    Why?
    I’m open to anything to retrieve my files – Any suggestions?
    I buy an external disk with both fireware & usb and use carbon copy cloner to duplicate you hd.
    run batcmd from an admin account to let you change permissions.
    From an administrator account enable root & be careful. This will let you look at any file on the system & delete everything!!!
    Get a new admin id.
    "BatChmod is a Cocoa utility for manipulating file and folder privileges in Mac OS X. It allows the manipulation of ownership as well as the privileges associated to the Owner, Group or others."
    http://www.macchampion.com/arbysoft/Welcome.html
    As an aside, I just noticed that the button to "apply to all enclosed items' is greyed out. I started checking other folders and best I can tell, all folders on my startup volume will not allow me to apply any permission changes to all enclosed items. Think this might have something to do with the alias issue?
    I noticed that my "apply to all enclosed items' button is greyed out too. I use BatChmod fps instead.
    Get the Mac to set up an additional administrative account. You can then change the password on your old account.
    Start with your computer power off. Hold down command-s. Power on your computer.
    Type in the following:
    The first two commands will depend on your release of Mac OS X. Look at what is typed out in the console to determine the exact format.
    # Type the follow two instructions to access the startup disk in read/write. Press return after each command.
    /sbin/fsck -fy
    /sbin/mount -uw /
    cd /var/db
    pwd
    #List all files. The l is a lower case L.
    ls -a
    #The move command acts as a rename command in this format.
    mv -i .applesetupdone .applesetupdone.old
    reboot
    Once you've done that the computer reboots and it's like the first time you used the machine. Your old accounts are all safe. From there you just change all other account passwords in the account preferences!!
    Limnos adds detailed explainations:
    http://discussions.apple.com/message.jspa?messageID=8441597#8441597
    The above the idea came from a post by JoseAranda at September 9, 2006 3:48 AM
    http://www.askdavetaylor.com/howdo_i_reset_my_mac_os_x_admin_rootpassword.html
    You will need to scroll down to see this post. Search for applesetupdone
    Or see:
    http://superpixel.ch/articles/running-setup-assistant-again/
    Once you have a new administrative account, you can change the password of your old administrative account
    blue apple > System Preferences > Accounts

  • Always used 1 main account.  Started using individual user accounts. So how do I use software or applications with a lot of data like Quicken under my own user account?

    I recently upgraded our family's mac to OS X.  I thought this was the perfect time to create and use "user accounts".  We had always used 1 main account.  So how do I use software or applications with a lot of data like Quicken under my own user account?  I wanted to be able to manage my own itunes library, iphone apps, messages.  But I still really need to use the Stuff I have in Quicken essentials.  I don't want to have to restart all my work done in Quicken already.

    I haven't used Quicken in a while, but most applications store your files in your Documents folder. Is that where your Quicken data file is? What you do next depends on how many family members need to get at that data.
    If multiple family members need to use the Quicken data file, try moving it to the Documents folder in the Shared account. That is an account that all accounts can see. It's at the same level as the other accounts. In other words, Shared is one level up from your Home account, or Hard Drive/Users/Shared.
    If you're the only one allowed to see that Quicken data, move the Quicken data file from the old main account to your account, and don't leave a copy behind. You can use the Shared folder as a way station for the transfer since you won't be able to see both accounts' Documents folders at the same time (because you're not allowed to peek into other people's accounts). Or you can use another disk or server for the transfer, as long as you can get to it when logged into either account.

  • When I log onto my macbook, my user account isn't showing up. All that shows up is a gray screen with only two boxes saying "Name" and "Password". How do I fix this?

    There was one time where my wi-fi wasn't connecting so I tried to turn it back on. A window popped up but I had alrdy clicked enter before I read it, but it said something like "...will change settings, is that okay...?" And then wi-fi still would not connect. So I tried restarting my computer, but when it turned on, my user account did not show up and all there was on the screen was two boxes that asked for name and password. I was the only person using my macbook so I never set up a password for it. Has anyone had this problem? How do I fix this?

    Since I'm not in front of your computer I can't tell what you see - I can only guess and give a hint. So once again, if the disk name on your Mac is "Macintosh HD", when you boot in Recovery Mode, and start up the Terminal in "Utilities" menu, and then type in the command:
        df -k
    you should see a list of "volumes" - one of which is named "/Volumes/Macintosh HD" (but yours could be anything) and in that folder there is another folder called "Users" and in that folder is the names of the home directories of the user accounts (and the names that you can enter into the login screen) that you are looking for. So if you are not familiar with using the Terminal you should say so and I can give more details. But assuming you're OK with typing in commands to theTerminal this is what I would try:
        ls -l /Volumes/Macintosh HD/Users
    and you should see something like the following (my disk name is "Yosemite" so I typed "ls -l /Volumes/Yosemite/Users")
    ML9Book:~ xxxx$ ls -l /Volumes/Yosemite/Users
    total 0
    drwxr-xr-x+  11 Guest      _guest   374 Oct 25 19:23 Guest
    drwxr-xr-x+  33 Jack       staff   1122 Oct 24 10:49 Jack
    drwxrwxrwt   13 root       wheel    442 Dec 27  2013 Shared
    drwxr-xr-x+  38 admin      staff   1292 Oct 25 16:59 admin
    drwxr-xr-x+  15 x13        staff    510 Oct 23 22:41 x13
    drwxr-xr-x+  12 514        staff    408 Oct 23 12:24 x14
    So now reboot your mac into normal mode - and you will see the login screen with the two empty boxes.
    So the above output tells me that there are 3 users - Jack, x13 and x14 (there is always a Shared user and there might or might not be a Guest user since it depends on how your setup was setup) - and these 3 are the names that I could try and enter into the login screen (in the top or first box). You can try no password, but I don't think you can create accounts without passwords, so this will likely fail. In that case you need to reboot in recovery mode and run the Terminal command again (from the Utilities menu) and do a resetpassword command. Another window will pop up and from there you select the Volume (in my case I selected the Yosemite volume - in your case you would select the "Macintosh HD" if that is what your volume name is). Then select the user account you want to reset the password from the drop-down list of user accounts (it will show you the long and short names, and the short name is what was in the listing above from the "ls -l" command), then enter the new password in the indicated box, and then enter it again in the next box, to make sure you didn't make a typo, and enter a password hint in the last box (optional). Then click the "Save" button and you will see another dialog box pop up telling you that the password was changed but not the Keychain password (hopefully you remember this one) - click the OK button then reboot back in normal mode (click on the Apple logo in the top left corner of the screen and click on Restart).
    Does this help?

  • Redwood User Account error on Job

    Hi All,
    We currently had all our BWP jobs fail with the following error:
    JCS-00503: OS account SYSJCS does not exist or is disabled on BRSAPPRDBWPV2
    JCS-00315: job must run under OS equivalent of Oracle account SYSJCS
    We run our oracle database on a Windows 2003 environment and also our Redwood/SAP servers are on a Windows 2003 server.
    The job itself users "USER" account.
    The only way we could get the jobs to start was by restarting the BWP Redwood services, and this worked fine.
    Also want to state the we had the following issue at the sametime which was flagged up to us in "messages":
    resubmit.update_job:
    ORA-04061: existing state of package body "SYSJCS.CHAIN" has been invalidated
    ORA-04065: not executed, altered or dropped package body "SYSJCS.CHAIN"
    ORA-06508: PL/SQL: could not find program unit being called: "SYSJCS.CHAIN"
    All our BWP process chains are executed via the RUN BW CHAIN script, which is copied and renamed for the process chain.
    We have tried to replicate the error in our dev environment but it worked fine. RFC points nothing at all.. Any help would be much appreciated. OSS note has been raised...
    Thank You
    Jazz

    Hi Jazz,
    The SYSJCS.CHAIN package is not used for BI Process Chains, only for CPS Chains. So the invalidation must have come from another source.
    When this error occurs, as long as there are sessions started before the package has been re-validated (state reinitialized), you can continue to run into this error until all sessions have been restarted. The extend of the error depends on the package being reinitialized (how often it is used and the dependencies it has) and the session that needs to call it.
    I think the error may already have been there before you did the chain import and just happened to surface shortly after the import.
    Regarding your other questions:
    1. RSI_IMPORT_BW_CHAINS or RSI_IMPORT_BW_CHAIN_DEFINITIONS:
    the second one is only needed if you want to display the process chain definitions in the web interface before the chain is even running in CPS (in the job monitor you only see the processes that have started); if you do not use that, RSI_IMPORT_BW_CHAINS is enough
    2. How would you go about maintaining BW process chains in Redwood (CPS)?
    This is a question that every customer runs into at some point. First, you currently can not change a process chain definition in the BI system from CPS. Then there are cases where you probably want to leave the process chain structure intact (typically on the deepest level: drop index, do some work, recreate indexes). And there are other cases where it can be useful to bring some logic to CPS (typically on all levels where you have process chain within process chain in BI, ie. on all but the deepest levels).
    For this last case, which is of course the most interesting for CPS, it can be very valuable to recreate the BI "meta-chain" structure in a CPS job chain.
    So here you replace the BI "meta-chain" calling several BI process chains by a Cronacle job chain still calling some of the BI process chains (the ones on the deepest levels).
    Now you can add all the CPS extras for error handling, retries, cross system dependencies, (external) events, alerting, etc. etc. on each and every point in the CPS job chain, so you get a lot more information, intervention and recovery points on your BI process than you would when running the entire thing in one big BI Process Chain (triggered from CPS or not does not matter).
    Typically the customer's decision here mainly depends on the advantages that can be achieved, especially if there are service levels to be met on the reports that need to be delivered from BI and these deadlines tend to get tighter by the month.
    By reducing the total runtime of the process or reducing the number of errors that occur or if they occur, the amount of work to fix it, you can save a lot of time, and thus money.
    Hope this helps.
    Regards,
    Anton.

  • Using Time Capsule to host iTunes library for use by multiple user accounts

    I have recently purchased my first Time Capsule (2TB, delivered December 2010). I have also recently begun to share a single iTunes library with my partner (ie. we have separate user accounts, but following the instructions found at http://steve-on-sakai.blogspot.com/2009/07/really-sharing-your-itunes-library.ht ml, both of our iTunes apps open to the same library).
    I think i've done everything correctly, as everything will work as expected ... once we are able to force our way into iTunes.
    My knowledge gap seems to be with my understanding of how Time Capsule and its "Data" folder work.
    I've moved our entire iTunes folder into the Data folder on the Time Capsule, and i understand that only one of our user accounts can have iTunes running (that one must quit iTunes before the other user will be able to launch iTunes).
    What happens sometimes, seemingly dependant on who has signed into their account first, or who has launched and quit iTunes first, is that iTunes will not launch; we are required to choose an iTunes library. This is easily enough done, except when the Data folder is unavailable to that particular user at that time (indicated by the "do not enter" symbol). I've noticed that disconnecting and re-connecting to the Time Capsule will get around this.
    I stumble through these steps whenever possible, but my partner is nervous about having to do all of this when i'm not available.
    Naturally, what i would like is for either of us, at any time, to be able to simply launch iTunes without issue.
    iTunes preferences on each accounts show that our iTunes Media folder location is "/Volumes/Data/iTunes/iTunes Music", and both checkboxes are checked for keeping the iTunes Media folder organized and copying files to the iTunes Media folder.
    I suspect that my problem might stem from the fact that i initially followed the instructions given at the above steve-on-sakai blog post, using our Shared folder. Since then, i have moved everything to the Time Capsule, and i wonder if the Terminal command in Step 7 should be repeated for the Data folder ... but i'm not "literate" enough to know what i'm doing there (but wise enough to know i shouldn't mess around with Terminal if i don't know what i'm doing).
    I have spent hours browsing the discussions here and elsewhere, and i can't seem to find anything that specifically addresses my issues. I have learned a lot from my searches, but i felt that posting a new question was my best option. I hope that i haven't duplicated anything.
    I hope that someone will be able to fine tune my efforts so that everything will "just work".
    Thank you so much, in advance...
    Bill.

    Jaap74 wrote:
    Two things that are not clear
    - I think it is not possible to have iTunes running at the same time on two Macs in the discribed setting.
    - I think over a wireless connection, it will reduce speed.
    Anyone with experience?
    I think what you mean is that it's not possible for two Macs to access the same iTunes library (ie. the same collection of media files) at the same time. From my research, this seems to be the case, and that's not my issue.
    In my particular situation -- one that i'm sure is shared by many others -- my partner and i have separate user accounts on the same Mac, +entirely sharing a single iTunes Library+ (ie. same media files, same playlists, etc., as if we were a single user) and as long as we remember to quit iTunes whenever we walk away from the Mac (allowing the other to log in and launch iTunes and access our common library), this is not a problem.
    And that is when my particular problem arises: when we launch iTunes, we are often asked to choose a Library (a series of navigations that my partner isn't entirely comfortable with), and occasionally the Data folder on the TimeCapsule is unavailable.
    As for the wireless connection to our library, this has not so far proven to be an issue. Depending on what other activities are going on at the time (ie. TimeMachine backups or background Internet activity, i presume), i have only rarely experienced brief interruptions in music streaming from the TimeCapsule (<1 second). In fact, last night, we watched a movie on the laptop, with the file streaming from the TimeCapsule, and it only hesitated a few times, and again for less than a second.
    Message was edited by: William Mclaughlin

  • Can you set up multiple user accounts on one laptop?

    can you set up multiple user accounts on one laptop?

    Of course.
    And instructions can depend on which OS X is installed.
    For v10.7 Lion > OS X Lion: Create a new user account
    For v10.8 Mountain Lion > OS X Mountain Lion: Create a new user account
    When you post for help, please state which OS X is installed.
    If you aren't sure, click About this Mac from your Apple menu 

  • In regard to Time Machine. I have two accounts one is an admin account, the other is a standard user account. When I implement Time Machine when I am logged into the Admin account, is the standard user also backed up?

    in regard to Time Machine.
    I have two accounts on one Macbook Pro running OS 10.6.8. One account is an admin account, the other is a standard user account.
    When I initially implemented Time Machine I was logged into the Admin account. I allowed Time Machine to erase the drive and backup the computer. Is the standard user account contents also backed up?
    Also after I completed the Time Machine backup session, I turned off Time Machine and removed the portable hard drive. I plan to return in to Time Machine after being away from the portable hard drive for approximately a month. After a short interruption of approximately one month, when the Macbook Pro is reconnected and Time Machine is turned back on, will Time Machine create a new instance of a backup? WIll the back up contain the standard user account changes?

    Time Machine backs up by default all the user accounts.
    When you reconnect the backup drive after one month, Time Machine will do an incremental backup and it might take a while minutes to hours depending on how much has been changed. With a gap of a month, Time Machine will have to do a lengthier than normal survey of both drives to see what has changed, so it might take some time preparing for the backup. The backup will include everything that has changed since the previous one.

  • I have an iMac with 2 internal drives and set-up with multiple user accounts.  How do I create a path to store data files on my second drive within an application?

    I have an iMac with 2 internal drives and a multiple user account set-up.  Hw do I create a path to store data files on the second drive within an application?

    This is the Mac mini forum not the iMac forum however...
    Applications written for average users like Photoshop, Word, i.e. GUI based applications provide a 'Save' dialog box which while allow selecting second drives or any drive. The dialob box initially shown might be in the simple mode but you just need to click on the triangle to show the full set of options. You should then see the different drive names amongst other options.
    If your referring to an application your writing yourself then you need to build a pathname. This can be in one of two styles depending on the programming system your using. This could be a POSIX style path or a Mac style path.
    POSIX = /Volumes/volname/foldername
    Mac style = Volname:foldername:

  • User Accounts and ORA-01722: invalid number error

    Hello,
    I have been using Express for a month or so now but have very limited knowledge of how it works.
    My Problem:
    I have a listing screen for user records which creates records in table QAS_USERS.
    When I add a record it saves the data OK and put the record in the list.
    When I click on the record in the list it takes me to the edit screen and I can change
    the details and it works OK and all the changes get saved to the database.
    On the data entry screen I have a list of the User Groups so I can select what group
    the user will be in, usual details in username, fullname, email address, password etc..
    I then added a routine to create a USER in the APEX Manage USERs.
    It creates the record in my table QAS_USERS and it creates a APEX User Account with
    the correct details and the record is displayed in the list.
    So far so good.
    Now the errors start:
    1. When I look at the User Account in Administration -> Manage Application Express Users
    most of the details have been added but the User Group does not get allocated.
    2. The record I created in QAS_USERS appears in the list on my listing screen but when
    I click on the Edit Icon on the left of the list I get the following error appear
    when the screen changes to the edit screen:
    ORA-01722: invalid number
    Unable to fetch row error
    QAS_USER Table:
    ID NUMBER
    CREATED_ON DATE
    CREATED_BY VARCHAR2(10)
    CHANGED_ON DATE
    CHANGED_BY VARCHAR2(10)
    ACTIVE VARCHAR2(3)
    USERNAME VARCHAR2(10)
    FULLNAME VARCHAR2(30)
    TEAMLEADER VARCHAR2(3)
    TEAMLEADER_ID NUMBER
    LAB NUMBER
    DIRECTOR VARCHAR2(3)
    ACTION_MANAGER VARCHAR2(3)
    SDM VARCHAR2(3)
    GM VARCHAR2(3)
    EMAIL_ADDRESS VARCHAR2(50)
    PASSWORD VARCHAR2(12)
    SDTL VARCHAR2(3)
    FIRSTNAME VARCHAR2(30)
    LASTNAME VARCHAR2(30)
    GROUP_ID NUMBER
    USER_ID VARCHAR2(20)
    Process Script to create the Express User Account:
    Declare
    group_id NUMBER;
    BEGIN
    group_id := APEX_UTIL.get_group_id (:P15_GROUP_ID);
    APEX_UTIL.CREATE_USER (
    P_USER_NAME => :P15_USERNAME,
    P_FIRST_NAME => :P15_FIRSTNAME,
    P_LAST_NAME => :P15_LASTNAME,
    P_WEB_PASSWORD => :P15_PASSWORD,
    P_EMAIL_ADDRESS => :P15_EMAIL_ADDRESS,
    p_developer_privs => 'ADMIN',
    p_group_ids => group_id);
    END;
    If any one has any ideas I would be very grateful.
    Regards,
    Simon.

    Hi,
    It could be that this is because you are using SYSDATE which contains the time as a fraction rather than TRUNC(SYSDATE) which just contains the current time. It could be that your working_dates_between raises this error.
    However, your formula is far more complicated than it needs to be.
    Firstly, you want to look at the date window ADD_MONTHS(TRUNC(SYSDATE), -6) to TRUNC(SYSDATE). Then you want to look at the portion of the absence that falls in the date window. This is GREATEST(Absence Attendance.Actual Start Date, ADD_MONTHS(TRUNC(SYSDATE), -6)) to LEAST(NVL(Absence Attendance."Actual End Date",TRUNC(SYSDATE)), TRUNC(SYSDATE)). You may need to add 1 to the absence end date because this is the last day of their absence rather than the date they return. It depends how you calculate the days between the start and end
    date of the absence. You can create calculations for the start and end date of the absences within the 6 months time window. Create calculation AbsenceStart as
    GREATEST(Absence Attendance.Actual Start Date, ADD_MONTHS(TRUNC(SYSDATE), -6))
    and AbsenceEnd as
    LEAST(NVL(Absence Attendance."Actual End Date",TRUNC(SYSDATE)), TRUNC(SYSDATE))
    Then you need to only pick up absence that a part of the absence in your 6 month date window. You can use a condition in the workbook or a condition in a case statement to do this. You then need to calculate the difference between these dates and SUM all the values.
    SUM(CASE WHEN AbsenceEnd >= AbsenceStart THEN WORKING_DAYS_BETWEEN(AbsenceStart, AbsenceEnd) END)
    That's it. Not so complicated after all.
    Rod West

  • Local user account is trying to autenticating against domain controller

    Hi all.  I am seeing a weird user logon issue on one of my laptop and on another user's PC.  Both of the laptop and the PC is a member of our domain.  However, on this particular laptop and PC, we are not login with a domain user account,
    rather we've created a local user account, grant it the local admin access, and login with this local user account.  Now, on my domain controller, I am seeing a bunch of account login failure message, which happens few times per minute and filling up
    the domain controller security log.  For the laptop, this is a clean build, with fresh Windows 7 installation, alone with MS Office 2010 and few third party application (eg: Adobe Reader, 7-ZIP, etc).  I've checked all group policy to ensure there
    are no service or connection that requires domain credential access that have applied to this laptop (or the PC).  I am not sure why this local user is trying to authenticating to our domain controller.  This user account doesn't exist in our domain. 
    The only thing I can think of is Microsoft Outlook 2010 might doing back ground authentication against the domain controller by using the current login user account, I just can't confirm this.  Did anyone encountered this issue in their environment? 
    Thank you.
    Below is a copy of the event.
    Log Name:      Security
    Source:        Microsoft-Windows-Security-Auditing
    Date:          13/06/2014 8:56:27 AM
    Event ID:      4625
    Task Category: Logon
    Level:         Information
    Keywords:      Audit Failure
    User:          N/A
    Computer:      domaincontroller.mydomain.local
    Description:
    An account failed to log on.
    Subject:
        Security ID:        NULL SID
        Account Name:        -
        Account Domain:        -
        Logon ID:        0x0
    Logon Type:            3
    Account For Which Logon Failed:
        Security ID:        NULL SID
        Account Name:        dummy
        Account Domain:        l-sparet400sc
    Failure Information:
        Failure Reason:        Unknown user name or bad password.
        Status:            0xc000006d
        Sub Status:        0xc0000064
    Process Information:
        Caller Process ID:    0x0
        Caller Process Name:    -
    Network Information:
        Workstation Name:    L-SPARET400SC
        Source Network Address:    192.168.2.181
        Source Port:        60720
    Detailed Authentication Information:
        Logon Process:        NtLmSsp
        Authentication Package:    NTLM
        Transited Services:    -
        Package Name (NTLM only):    -
        Key Length:        0
    This event is generated when a logon request fails. It is generated on the computer where access was attempted.
    The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
    The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
    The Process Information fields indicate which account and process on the system requested the logon.
    The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
    The authentication information fields provide detailed information about this specific logon request.
        - Transited services indicate which intermediate services have participated in this logon request.
        - Package name indicates which sub-protocol was used among the NTLM protocols.
        - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
        <EventID>4625</EventID>
        <Version>0</Version>
        <Level>0</Level>
        <Task>12544</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8010000000000000</Keywords>
        <TimeCreated SystemTime="2014-06-13T12:56:27.263546000Z" />
        <EventRecordID>299829083</EventRecordID>
        <Correlation />
        <Execution ProcessID="488" ThreadID="640" />
        <Channel>Security</Channel>
        <Computer>domaincontroller.mydomain.local</Computer>
        <Security />
      </System>
      <EventData>
        <Data Name="SubjectUserSid">S-1-0-0</Data>
        <Data Name="SubjectUserName">-</Data>
        <Data Name="SubjectDomainName">-</Data>
        <Data Name="SubjectLogonId">0x0</Data>
        <Data Name="TargetUserSid">S-1-0-0</Data>
        <Data Name="TargetUserName">dummy</Data>
        <Data Name="TargetDomainName">l-sparet400sc</Data>
        <Data Name="Status">0xc000006d</Data>
        <Data Name="FailureReason">%%2313</Data>
        <Data Name="SubStatus">0xc0000064</Data>
        <Data Name="LogonType">3</Data>
        <Data Name="LogonProcessName">NtLmSsp </Data>
        <Data Name="AuthenticationPackageName">NTLM</Data>
        <Data Name="WorkstationName">L-SPARET400SC</Data>
        <Data Name="TransmittedServices">-</Data>
        <Data Name="LmPackageName">-</Data>
        <Data Name="KeyLength">0</Data>
        <Data Name="ProcessId">0x0</Data>
        <Data Name="ProcessName">-</Data>
        <Data Name="IpAddress">192.168.2.181</Data>
        <Data Name="IpPort">60720</Data>
      </EventData>
    </Event>

    its the service which is using the account info and authenticating against the DC to obtain service ticket and fails
    Interesting log section is NULL SID which doesn't corresponds to any account name.
    Security ID:        NULL SID
        Account Name:        -
        Account Domain:        -
        Logon ID:        0x0
    and the below section explains , the request is made over network, which is most of the times by the service
    Detailed Authentication Information:
        Logon Process:        NtLmSsp
        Authentication Package:    NTLM
        Transited Services:    -
        Package Name (NTLM only):    -
        Key Length:        0
    The below is assumed to be performed on a client which does not run mission critical production applications which has zero impact when you perform the below actions,
    can you disable
    a) Server service
    b) Workstation service
    c) Disable RPC dependent service and services which depend on RPC and test
    Question:
    What is the level of DC hardening you have in your environment ?

  • Show report in different currency depending on user parameter

    hi all,
    i'm trying to show my report in different currency, depending on users given parameter.
    i hold my account balance in USD based. User should select one parameter, in which currency they want to see their account balance. (e.g. EURO, GBP ...) and depending on their selection, i want to convert USD based info into chosen currency, by fetching field from currency table and making some calculation.
    also i want to include in report currency($, £ ...) accordingly ().
    how can i achieve this, has somebody any suggestion to me?
    thanks in advance.
    bogi.

    hi,
    i think i need to explain my problem more detailed. anyone who has suggestion, please help me.
    i have 3 tables account, times and currency.
    - times table has time_key, date, day_of_week fields.
    - account table has - account_balance and time_key_FK fields.
    - currency table has currency_type, amount, time_key_FK fields.
    1. i have function decode(:Currency,'USD',account_balance,'EURO',--here i want to replace my calculation CALC1---)
    CALC1- this calculation need to some calculation like this: account_balance * (fetched field from this sql)(select amount from currency, account where currency.currency_type='EURO' and account.time_key_FK=currency.time_key_FK)
    i tried to do this, but discoverer plus doesn't let me make condition and calc. i'm very confused.
    2. after i achieve this query, somehow i want to display on worksheet on which currency is it based. can i get parameter value, and show this value as in column heading?
    tnx!!!

  • Types and graphics displayed incorrect in Safari with a second User account

    With my own user account (Admin) Safari works very well. With the second user account I have problems to display Websites correctly. They are only displayed in capital letters and graphics are not loaded. At first I was thinking it depends on the administration authorization or a Java Update. But either doesn't change anything.
    In the meantime I install Firefox 3.0 and the same problem...
    Please help me - it is such %*#
    Thank you very much!

    Place this folder with Word documents located in your Home folder/directory in the Shared folder for your user account at Home > Shared and this employee can do the same when wanting to share a folder or documents with you.
    After doing so, this folder with Word documents will be available in this user's Shared folder when the user logs in to their account.
    The Shared and Public folders let you share files with other people.
    The Shared folder is located in the Users folder on your hard disk. You can use it to share files with other users on your computer. The Shared folder is set up with Read & Write permissions so that all users can open the files in this folder and copy files to the folder.
    Use your personal Public folder inside your home folder to share files with other people on the network. To share information in your Public folder, you must turn on Personal File Sharing in the Sharing pane of System Preferences. Your Public folder is set up with "Read only" permissions that allow others to see and copy its contents, but not change the content.
    Your Public folder also contains a Drop Box folder, which is set up so other people can copy files to your Drop Box, but they cannot see its contents.

  • I'm unable to grant full access to 2nd user account. What am I missing

    While our MacBook Pro is out for repairs, I need a way to process my wife's emails and other business. So I'm trying to set up a 2nd user account for my wife on our iMac (running 10.7.5 Lion). Unfortunately, every step I've tried has failed to grant permission for her account to access the iMac desktop or launch applications other than Safari.
    Here's what I've tried:
    1. I created an account with my wife's name and password under Users & Groups in System Preferences.
    2. In her Users & Groups account, I granted her Adminstrator privileges.
    3. In the Sharing folder in System Preferences, I selected all the folders except those labeled "remote" and "xgrid" (whatever that is). I granted Read & Write privileges for each one. These included two Desktop folders, and I added the folder for Applications.
    4. I made sure File Sharing was turned on, along with Printer Sharing, Web Sharing, Screen Sharing, Internet Sharing, etc.
    5. Under Sharing Options, I noted a checkmark in the box labeled "Share files and folders using AFP", although the "number of users connected" was 0. I left that alone.
    6. Because several sharing choices were listed as "blocked by firewall," I turned the Firewall setting off.
    Despite all this, when I log in as my wife, I cannot launch any major applications except Safari, whether from the Dock or Applications folder. In fact, most of the apps in the folder are grayed out. And when I try to access the Desktop, Other Files, and various other folders, I receive a message that her account "does not have permission to see the contents." Why not? What have I overlooked?
    This is becoming an urgent problem, because there's business that must be conducted. I have had similar problems with the iMac from the start, when it refused to accept me as the rightful owner of files that were transferred from our older Mac Pro dwesktop. Yikes!
    Any help on this will be very much appreciated. Thanks.
    Message was edited by: David Henderson7

    Hey thomashfrompa,
    Thanks for the question. I understand that you are experiencing issues with iTunes for Windows. The following article outlines the error message you are receiving and a potential resolution:
    iTunes 11.1.4 for Windows: Unable to install or open
    http://support.apple.com/kb/TS5376
    Some Windows customers may experience installation issues while trying to install or open iTunes 11.1.4.
    Symptoms may include:
    "The program can't start because MSVCR80.dll is missing from your computer"
    "iTunes was not installed correctly. Please reinstall iTunes. Error 7 (Windows Error 126)”
    "Runtime Error: R6034 - An application has made an attempt to load the C runtime library incorrectly"
    "Entry point not found: videoTracks@QTMovie@@QBE?AV?$Vector@V?$RefPtr@VQTTrack@@@***@@$0A@VCrashOnOverf low@@***@@XZ could not be located in the dynamic link library C:\Program Files(x86)\Common Files\Apple\Apple Application Support\WebKit.dll”
    Resolution
    Follow these steps to resolve the issue:
    Check for .dll files
    1. Go to C:\Program Files (x86)\iTunes and C:\Program Files\iTunes and look for .dll files.
    2. If you find QTMovie.DLL, or any other .dll files, move them to the desktop.
    3. Reboot your computer.
    Note: Depending on your operating system, you may only have one of the listed paths.
    Uninstall and reinstall iTunes
    1. Uninstall iTunes and all of its related components.
    2. Reboot your computer. If you can't uninstall a piece of Apple software, try using the Microsoft Program Install and Uninstall Utility.
    3. Re-download and reinstall iTunes 11.1.4.
    Thanks,
    Matt M.

Maybe you are looking for

  • Convert from pdf to word?

    i cant convert from pdf to word - when i sign in it greys out the conversion setting so i cant use it - what am i missing?

  • Divide by zero error encountered

    Dear All, When our customer process PO, they got an error like below: Divide by zero error encountered. Tax definition [ovcg] They also got Divide by zero error encountered. Outgoing payments  [ovpm] They can process their business but we need to kno

  • Issues exporting versions from tiff files

    I upgraded to Aperture 3 [3.0.2] running on 10.6. Aperture works fine, except when trying to export a version of a tiff file [these are 8 bit 200mb scans]. Exporting a master from a tiff file works, exporting versions from RAW files work, but Apertur

  • Shutting Down Randomly

    Lately iPhoto seems to close, shutdown, when I try to upload/transfer photos. Not all photos, certain photos. There seems to be no clear reason a certain photo will cause it to freak out. Any ideas? It's driving me nuts.

  • Deleted songs from Library and can't find them!

    Songs from iTunes were wiped out so I wanted to take the music from my iPOD and transfer it to the iTUNES Library. I was told to do to the iPOD folder on my PC and find the hidden folder that contains all of my songs (The folders were titled F00, F01