Home

Page 1 of 5 123 ... LastLast
Results 1 to 10 of 49

Thread: "You have attempted to login during a restricted login time"

  1. #1
    Tor Harald Lothe NNTP User

    "You have attempted to login during a restricted login time"

    Hi,

    I have used ZCM 10.0.1 DLU policy for Windows XP SP2, but some time after
    these users have been created locally (not volatile users), I get the
    following message from Windows during login:

    "Windows Security Message
    You have attempted to login during a restricted login time.
    Contact your System Administrator or try again later."

    Login to eDirectory with the Novell Client is OK; it is the local created
    Windows user that are denied login to Windows itself.
    If I delete the local Windows user, and then login again - everything is
    fine for a few boots....

    Environment:
    Client: Windows XP SP2 with all Windows Updates, ZEN Agent 10.0.1, Novell
    Client 4.91 SP4 + latest nwgina1 patch.
    Server: ZCM 10.0.1 on SLES 10 SP1 back end.

    --
    Any suggestions?

    Regards,
    Tor Harald





  2. #2
    Shaun Pond NNTP User

    Re: "You have attempted to login during a restricted login time"

    Tor,

    not in an AD domain by any chance?

    --

    Shaun Pond



  3. #3
    Tor Harald Lothe NNTP User

    Re: "You have attempted to login during a restricted login time"

    No - eDirectory 8.7.3.9 on OES Linux v1 :-)

    Tor Harald



  4. #4
    Tor Harald Lothe NNTP User

    Re: "You have attempted to login during a restricted login time"

    Hi!

    Did some more trouble shooting, and here is what i found:

    1. Users created manually in the local SAM (in XP user manager) are never
    experiencing this problem
    2. As sooon as manually created users are touched by DLU, they will have
    this problem (eg: logging in to eDir/Novell Client with the same username
    that was created manually on XP).
    3. All DLU created users are having this problem.

    Logged event:
    Event ID: 530 Type: Failure Audit
    Description: Logon Failure: Reason: Account logon time restriction
    violation

    If the user restricted logon time is cleared with:
    net user <username> /time:all
    ....the user can log in ONE time with DLU. The next login (DLU og workstation
    only), logon time restrictions have been put back on again, and the user is
    unable to log in again...

    Conclusion: As I see it, this is caused by malfunctioning DLU code in ZCM
    10.0.1.
    One note: I have only tested this on Windows XP Pro SP2 Norwegian. English
    localized XP may not experience the same problem....

    Anyone else seen this or having a fix?
    Is Novell aware of this problem? (It's been said in here that they are aware
    of some DLU issues....)

    Regards,
    Tor Harald Lothe


    "Tor Harald Lothe" <torharald@fake.com> skrev i melding
    news:VhITi.18248$NG7.17392@kovat.provo.novell.com. ..
    > Hi,
    >
    > I have used ZCM 10.0.1 DLU policy for Windows XP SP2, but some time after
    > these users have been created locally (not volatile users), I get the
    > following message from Windows during login:
    >
    > "Windows Security Message
    > You have attempted to login during a restricted login time.
    > Contact your System Administrator or try again later."
    >
    > Login to eDirectory with the Novell Client is OK; it is the local created
    > Windows user that are denied login to Windows itself.
    > If I delete the local Windows user, and then login again - everything is
    > fine for a few boots....
    >
    > Environment:
    > Client: Windows XP SP2 with all Windows Updates, ZEN Agent 10.0.1, Novell
    > Client 4.91 SP4 + latest nwgina1 patch.
    > Server: ZCM 10.0.1 on SLES 10 SP1 back end.
    >
    > --
    > Any suggestions?
    >
    > Regards,
    > Tor Harald
    >
    >
    >
    >




  5. #5
    Shaun Pond NNTP User

    Re: "You have attempted to login during a restricted login time"

    Tor,

    There is no bug logged for this at the moment - I will try to test this
    - can you check what the hours are set to /before/ you run the net user
    command? You can do
    net user [username]
    to find this out

    --

    Shaun Pond



  6. #6
    Tor Harald Lothe NNTP User

    Re: "You have attempted to login during a restricted login time"

    Allowed login times:
    Sunday 1:00 AM - 2:00 AM
    Sunday 3:00 AM - 7:00 AM
    Sunday 8:00 AM - 10:00 AM
    Sunday 2:00 PM - 3:00 PM
    Monday 3:00 AM - 4:00 AM

    I just wish my own working hours were like this :-)


    "Shaun Pond" <shaun@false.email> skrev i melding
    news:VA.0000bf7b.00c44906@false.email...
    > Tor,
    >
    > There is no bug logged for this at the moment - I will try to test this
    > - can you check what the hours are set to /before/ you run the net user
    > command? You can do
    > net user [username]
    > to find this out
    >
    > --
    >
    > Shaun Pond
    >
    >




  7. #7
    Tor Harald Lothe NNTP User

    Re: "You have attempted to login during a restricted login time"

    Also, if I use volatile user, this is off course not a problem....
    I also have a feeling that the login time restrictions is set by DLU code
    BEFORE the user is logged in...

    I'll dig some logs out for you if you want....

    Regards,
    Tor Harald Lothe


    "Shaun Pond" <shaun@false.email> skrev i melding
    news:VA.0000bf7b.00c44906@false.email...
    > Tor,
    >
    > There is no bug logged for this at the moment - I will try to test this
    > - can you check what the hours are set to /before/ you run the net user
    > command? You can do
    > net user [username]
    > to find this out
    >
    > --
    >
    > Shaun Pond
    >
    >




  8. #8
    Shaun Pond NNTP User

    Re: "You have attempted to login during a restricted login time"

    Tor,

    > I'll dig some logs out for you if you want....
    >

    yes please - I'm just reinstalling my server (I was testing upgrading
    from 10.0.0.0 and it got stuck so I'm reinstalling as 10.0.1.0 and that
    takes a little while :)

    --

    Shaun Pond



  9. #9
    Shaun Pond NNTP User

    Re: "You have attempted to login during a restricted login time"

    Tor,

    does your policy have "manage existing user" checked?

    --

    Shaun Pond



  10. #10
    Tor Harald Lothe NNTP User

    Re: "You have attempted to login during a restricted login time"

    What logs do you need? zmd-messages from the client?

    Tor Harald



Page 1 of 5 123 ... LastLast

Similar Threads

  1. Short term memory allocation and multiple abends
    By Candace in forum OES-NW: Abends-Hangs
    Replies: 0
    Last Post: 15-Jul-2007, 07:02 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •