Windows7 authentication failure
Why do I get this? What does C0000225 mean?> Logon Type: 3> Account For Which Logon Failed:> Security ID: NULL SID> Account Name: root> Account Domain:> Failure Information:> Failure Reason: An Error occured during Logon.> Status: 0xc0000225> Sub Status: 0x0> Process Information:> Caller Process ID: 0x0> Caller Process Name: -> Network Information:> Workstation Name:> Source Network Address: 123.456.789.012> Source Port: 59215> Detailed Authentication Information:> Logon Process:> Authentication Package: NTLM> Transited Services: -> Package Name (NTLM only): -> Key Length: 0I wanted to see Logon Process ntlmssp and Package Name ntlmv2I am trying to mount a Windows share from a linux box. The same exact client works fine for a share exported byWindows 2003 server. I am not sure what Windows7 box expects that I am not providing that is sufficient for Windows 2003 server.
February 19th, 2010 8:57am

Hi, The error code means STATUS_NOT_FOUND. Even when typing the incorrect password we do not lock the user account and the reason is because the number of unsuccessful logon attempts is not incremented by the authenticating domain controller. Based on my research, I found an article which is only for Windows Server 2003 and no relevant symptom is recorded in Windows 7. For your reference, please refer to the following article: Unsuccessful authentications At this stage, I suggest you temporarily turn off firewall on the machine and login with the correct password for a test. Also, you can login with another user account or use another Windows 7 machine to check the result. Thanks, Novak
Free Windows Admin Tool Kit Click here and download it now
February 26th, 2010 5:33am

Novak, Thanks. The firewall is turned off. The Windows 7 server is not a domain controller, it is astand alone server. I can authenticate fine from another Windows 7 client to the very same Windows 7 server using smb2 that my linux smb2 client fails. Is there another way to go beyond event log i.e. some other way to figure out what is this invalid parameter is that Windows 7 server returns with status_invalid_parameter?
June 17th, 2010 8:32pm

Wonder what does this (non-zero) status indicate/tell NtlmServerAccept End 2010-06-18 18:19:40.929.638500 StageHint=2|InContext=0x01838150|OutContext=0x01838150|Status=2148074248
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2010 12:26am

This invalid token was because of me, smb2 client, updating timestamp in the AV pair received in type 2 message and sending that AV pair as part of type 3 message. When I stopped modifying timestamp, authenticationworked.
June 24th, 2010 11:28pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics