Server Management - Systems Insight Manager
Showing results for 
Search instead for 
Did you mean: 

User account cannot logon to SIM 5sp5

Regular Advisor

User account cannot logon to SIM 5sp5

I'm trying to allow my monitoring people to access the SIM web site with a common existing service account for 24x7 ops. The account has the same authorizations in SIM as their normal accounts (which they can logon with).

I've documented the audit trail for successful and unsuccessful logons.

The first event is common in both with event ID 552 whereby domain service account that SIM runs under is shown in conjunction with the domain account trying to logon. See below

Logon attempt using explicit credentials:
Logged on user:
User Name: svccim
Domain: CORP
Logon ID: (0x0,0x56E7103)
Logon GUID: {c800f9ca-1f6f-f866-6980-67b3004bb60f}
User whose credentials were used:
Target User Name: svcSysOps
Target Domain: corp
Target Logon GUID: -

Then next event for the unsuccessful logon

Logon Failure:
Reason: User not allowed to logon at this computer
User Name: svcsysops
Domain: corp
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: MLTPSOM40
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -

The account is a normal domain users account like the rest. I've even given explicit logon locally and access computer from network rights in local security policy.

Strange deal.. appreciate any suggestions.

Rob Buxton
Honored Contributor

Re: User account cannot logon to SIM 5sp5

A wild guess, the generic user does not have access to "All Computers" in the AD User record. You can lock it down to selected computers.
Regular Advisor

Re: User account cannot logon to SIM 5sp5

I gave up and setup a local account rather than fuss with this any longer and all our GPO possibilities.. Before long the only users able to logon to boxes will be administrators.
Rob Buxton
Honored Contributor

Re: User account cannot logon to SIM 5sp5

I certainly think it's an issue outside of HPSIM as it really doesn't care about the account as long as the credentials are correct. Even if you don't have the tools sets set up you can still log in, you just don't see anything.