I have a Windows 2012R2 file server that was upgraded from Server 2012. Initially the file server was working and users were able to access their home directories on the single shared folder. A few days ago the server stopped allowing access to the shared
folder and began giving the following event in the security log. I double-checked the local security policies "Allow logon locally" had everyone and "Deny logon locally" had no users or groups. I can login to the server as one of the user
accounts and access that user's homedirectory by mapping to the share\%username%, however, when I try to map from another computer I get the following error: logon failure the user has been granted the requested logon type I disjoined the server from the domain
then rejoined it. I also moved the computer account to the Computers container in AD and rebooted the server (just in case someone had set a group policy). I stopped sharing the shared folder then reshared it with the correct group permissions, which has full
control for share rights and modify for ntfs acls. I've tried adding a test user to the share group with full control then modify ntfs acls. I tried to run sysprep on the server, but it fails with an error that it can't be ran on a machine that has been upgraded
from a previous version of Windows. I ran cacls on the ntfs folders and the permissions are set correctly. Same is true when viewed from the gui. I am out of ideas. Can anyone please assist? ---------------------------------------------------------------------------------
Event ID 4625 on server: An account failed to log on. Subject: Security ID: NULL SID Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: NULL SID Account Name: xxxxxxxx Account Domain: xxxxxxxx Failure
Information: Failure Reason: The user has not been granted the requested logon type at this machine. Status: 0xC000015B Sub Status: 0x0 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: xxxxxxxx Source
Network Address: xxxxxxxx Source Port: 50146 Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon request fails. It is
generated on the computer where access was attempted. The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network). The Process Information fields indicate which account and process on the system requested the logon. The Network Information fields
indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases. The authentication information fields provide detailed information about this specific logon request. - Transited services indicate
which intermediate services have participated in this logon request. - Package name indicates which sub-protocol was used among the NTLM protocols. - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
↧