Unable to logon to SBS after reboot

Hi All,

I have a problem with one of my SBS server installations,
it is as follows:

sometimes when the server is rebooted or shut down and
stared up again, i am unable to logon to it using the
Administrator account and for that matter any other
account with Admin rights. After a second reboot this
normally clears.

I also get messages in the event viewer around the same
time:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 11/11/2003
Time: 17:16:23
User: N/A
Computer: SBSERVER
Description:
The Microsoft Exchange Event service failed to start due
to the following error:
Logon failure: account currently disabled.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 11/11/2003
Time: 17:16:23
User: N/A
Computer: SBSERVER
Description:
The IPSEC driver service failed to start due to the
following error:
Logon failure: account currently disabled.

Event Type: Error
Event Source: PolicyAgent
Event Category: None
Event ID: 321
Date: 11/11/2003
Time: 17:16:23
User: N/A
Computer: SBSERVER
Description:
IPSEC PolicyAgent Service: Ipsec Driver failed to start.

Event Type: Error
Event Source: PolicyAgent
Event Category: None
Event ID: 319
Date: 11/11/2003
Time: 17:16:23
User: N/A
Computer: SBSERVER
Description:
IPSEC PolicyAgent Service couldn't be started: Oakley
failed to start.

and many more but you get the idea... most are down to
logon failure as for some reason it would seem that the
localsystem account has been disabled.

I am not running IPSec on this server! but i am under the
impression that this is causing the fault from the above
messages

normally after this has happened the adminsitrator
profile on the server has been reset, ie outlook
settings, backgrounds etc.

I attempted to apply SP1a to it yesterday and it kept
telling me that it was not an SBS server, i even tried
performing maintenance on the installation and this did
not help, as yet i am unable to apply SP1a

Windows is SP4 and i belive the Exchange is SP3 (by the
OWA screen) the server runs fine normally but i would
like to get this resolved, does anyone have any ideas??
help would be appreciated

i have not contacted MS yet about this problem and i am
unable thus far to find any information about this
particular problem so i though i would try here.

TIA

Regards

Chris

Marina
Wed Nov 12 03:01:36 CST 2003

Check your administrator account on the SBS. Check services that are running
with that account.

Marina

"Chris" <chrish@hibernafm.co.uk> schreef in bericht
news:567c01c3a8f7$206f9d40$7d02280a@phx.gbl...
> Hi All,
>
> I have a problem with one of my SBS server installations,
> it is as follows:
>
> sometimes when the server is rebooted or shut down and
> stared up again, i am unable to logon to it using the
> Administrator account and for that matter any other
> account with Admin rights. After a second reboot this
> normally clears.
>
> I also get messages in the event viewer around the same
> time:
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7000
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> The Microsoft Exchange Event service failed to start due
> to the following error:
> Logon failure: account currently disabled.
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7000
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> The IPSEC driver service failed to start due to the
> following error:
> Logon failure: account currently disabled.
>
> Event Type: Error
> Event Source: PolicyAgent
> Event Category: None
> Event ID: 321
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> IPSEC PolicyAgent Service: Ipsec Driver failed to start.
>
> Event Type: Error
> Event Source: PolicyAgent
> Event Category: None
> Event ID: 319
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> IPSEC PolicyAgent Service couldn't be started: Oakley
> failed to start.
>
> and many more but you get the idea... most are down to
> logon failure as for some reason it would seem that the
> localsystem account has been disabled.
>
> I am not running IPSec on this server! but i am under the
> impression that this is causing the fault from the above
> messages
>
> normally after this has happened the adminsitrator
> profile on the server has been reset, ie outlook
> settings, backgrounds etc.
>
> I attempted to apply SP1a to it yesterday and it kept
> telling me that it was not an SBS server, i even tried
> performing maintenance on the installation and this did
> not help, as yet i am unable to apply SP1a
>
> Windows is SP4 and i belive the Exchange is SP3 (by the
> OWA screen) the server runs fine normally but i would
> like to get this resolved, does anyone have any ideas??
> help would be appreciated
>
> i have not contacted MS yet about this problem and i am
> unable thus far to find any information about this
> particular problem so i though i would try here.
>
> TIA
>
> Regards
>
> Chris

anonymous
Wed Nov 12 03:37:15 CST 2003

Thanks Marina,

I have already checked the account, there is nothing
wrong with it normally it works fine just occasionally
when it is rebooted i get these messages... and as i said
after another boot it normally works fine. there is no
lockout on hte administrator account so this can not be
causing the problem... can it? i am open to suggestions.

Chris

>-----Original Message-----
>Check your administrator account on the SBS. Check
services that are running
>with that account.
>
>Marina
>
>"Chris" <chrish@hibernafm.co.uk> schreef in bericht
>news:567c01c3a8f7$206f9d40$7d02280a@phx.gbl...
>> Hi All,
>>
>> I have a problem with one of my SBS server
installations,
>> it is as follows:
>>
>> sometimes when the server is rebooted or shut down and
>> stared up again, i am unable to logon to it using the
>> Administrator account and for that matter any other
>> account with Admin rights. After a second reboot this
>> normally clears.
>>
>> I also get messages in the event viewer around the same
>> time:
>>
>> Event Type: Error
>> Event Source: Service Control Manager
>> Event Category: None
>> Event ID: 7000
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> The Microsoft Exchange Event service failed to start
due
>> to the following error:
>> Logon failure: account currently disabled.
>>
>> Event Type: Error
>> Event Source: Service Control Manager
>> Event Category: None
>> Event ID: 7000
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> The IPSEC driver service failed to start due to the
>> following error:
>> Logon failure: account currently disabled.
>>
>> Event Type: Error
>> Event Source: PolicyAgent
>> Event Category: None
>> Event ID: 321
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> IPSEC PolicyAgent Service: Ipsec Driver failed to
start.
>>
>> Event Type: Error
>> Event Source: PolicyAgent
>> Event Category: None
>> Event ID: 319
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> IPSEC PolicyAgent Service couldn't be started: Oakley
>> failed to start.
>>
>> and many more but you get the idea... most are down to
>> logon failure as for some reason it would seem that the
>> localsystem account has been disabled.
>>
>> I am not running IPSec on this server! but i am under
the
>> impression that this is causing the fault from the
above
>> messages
>>
>> normally after this has happened the adminsitrator
>> profile on the server has been reset, ie outlook
>> settings, backgrounds etc.
>>
>> I attempted to apply SP1a to it yesterday and it kept
>> telling me that it was not an SBS server, i even tried
>> performing maintenance on the installation and this did
>> not help, as yet i am unable to apply SP1a
>>
>> Windows is SP4 and i belive the Exchange is SP3 (by the
>> OWA screen) the server runs fine normally but i would
>> like to get this resolved, does anyone have any ideas??
>> help would be appreciated
>>
>> i have not contacted MS yet about this problem and i am
>> unable thus far to find any information about this
>> particular problem so i though i would try here.
>>
>> TIA
>>
>> Regards
>>
>> Chris
>
>
>.
>

Mal
Wed Nov 12 06:47:45 CST 2003

Time set correctly? I have seen this when the time is set way off.

Mal Osborne
MCSE MVP Mensa


"Chris" <chrish@hibernafm.co.uk> wrote in message
news:567c01c3a8f7$206f9d40$7d02280a@phx.gbl...
> Hi All,
>
> I have a problem with one of my SBS server installations,
> it is as follows:
>
> sometimes when the server is rebooted or shut down and
> stared up again, i am unable to logon to it using the
> Administrator account and for that matter any other
> account with Admin rights. After a second reboot this
> normally clears.
>
> I also get messages in the event viewer around the same
> time:
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7000
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> The Microsoft Exchange Event service failed to start due
> to the following error:
> Logon failure: account currently disabled.
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7000
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> The IPSEC driver service failed to start due to the
> following error:
> Logon failure: account currently disabled.
>
> Event Type: Error
> Event Source: PolicyAgent
> Event Category: None
> Event ID: 321
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> IPSEC PolicyAgent Service: Ipsec Driver failed to start.
>
> Event Type: Error
> Event Source: PolicyAgent
> Event Category: None
> Event ID: 319
> Date: 11/11/2003
> Time: 17:16:23
> User: N/A
> Computer: SBSERVER
> Description:
> IPSEC PolicyAgent Service couldn't be started: Oakley
> failed to start.
>
> and many more but you get the idea... most are down to
> logon failure as for some reason it would seem that the
> localsystem account has been disabled.
>
> I am not running IPSec on this server! but i am under the
> impression that this is causing the fault from the above
> messages
>
> normally after this has happened the adminsitrator
> profile on the server has been reset, ie outlook
> settings, backgrounds etc.
>
> I attempted to apply SP1a to it yesterday and it kept
> telling me that it was not an SBS server, i even tried
> performing maintenance on the installation and this did
> not help, as yet i am unable to apply SP1a
>
> Windows is SP4 and i belive the Exchange is SP3 (by the
> OWA screen) the server runs fine normally but i would
> like to get this resolved, does anyone have any ideas??
> help would be appreciated
>
> i have not contacted MS yet about this problem and i am
> unable thus far to find any information about this
> particular problem so i though i would try here.
>
> TIA
>
> Regards
>
> Chris

Chris
Wed Nov 12 07:39:25 CST 2003

Will check that but it think it is ok... will let you know
>-----Original Message-----
>Time set correctly? I have seen this when the time is
set way off.
>
>Mal Osborne
>MCSE MVP Mensa
>
>
>"Chris" <chrish@hibernafm.co.uk> wrote in message
>news:567c01c3a8f7$206f9d40$7d02280a@phx.gbl...
>> Hi All,
>>
>> I have a problem with one of my SBS server
installations,
>> it is as follows:
>>
>> sometimes when the server is rebooted or shut down and
>> stared up again, i am unable to logon to it using the
>> Administrator account and for that matter any other
>> account with Admin rights. After a second reboot this
>> normally clears.
>>
>> I also get messages in the event viewer around the same
>> time:
>>
>> Event Type: Error
>> Event Source: Service Control Manager
>> Event Category: None
>> Event ID: 7000
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> The Microsoft Exchange Event service failed to start
due
>> to the following error:
>> Logon failure: account currently disabled.
>>
>> Event Type: Error
>> Event Source: Service Control Manager
>> Event Category: None
>> Event ID: 7000
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> The IPSEC driver service failed to start due to the
>> following error:
>> Logon failure: account currently disabled.
>>
>> Event Type: Error
>> Event Source: PolicyAgent
>> Event Category: None
>> Event ID: 321
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> IPSEC PolicyAgent Service: Ipsec Driver failed to
start.
>>
>> Event Type: Error
>> Event Source: PolicyAgent
>> Event Category: None
>> Event ID: 319
>> Date: 11/11/2003
>> Time: 17:16:23
>> User: N/A
>> Computer: SBSERVER
>> Description:
>> IPSEC PolicyAgent Service couldn't be started: Oakley
>> failed to start.
>>
>> and many more but you get the idea... most are down to
>> logon failure as for some reason it would seem that the
>> localsystem account has been disabled.
>>
>> I am not running IPSec on this server! but i am under
the
>> impression that this is causing the fault from the
above
>> messages
>>
>> normally after this has happened the adminsitrator
>> profile on the server has been reset, ie outlook
>> settings, backgrounds etc.
>>
>> I attempted to apply SP1a to it yesterday and it kept
>> telling me that it was not an SBS server, i even tried
>> performing maintenance on the installation and this did
>> not help, as yet i am unable to apply SP1a
>>
>> Windows is SP4 and i belive the Exchange is SP3 (by the
>> OWA screen) the server runs fine normally but i would
>> like to get this resolved, does anyone have any ideas??
>> help would be appreciated
>>
>> i have not contacted MS yet about this problem and i am
>> unable thus far to find any information about this
>> particular problem so i though i would try here.
>>
>> TIA
>>
>> Regards
>>
>> Chris
>
>
>.
>

Marina
Wed Nov 12 16:19:59 CST 2003

Hi Chris,

Have you checked out www.eventid.net? E.g.
http://www.eventid.net/display.asp?eventid=319&source= and
http://www.eventid.net/display.asp?eventid=321&source=

Marina

<anonymous@discussions.microsoft.com> schreef in bericht
news:0bb601c3a900$8ee6f260$a301280a@phx.gbl...
> Thanks Marina,
>
> I have already checked the account, there is nothing
> wrong with it normally it works fine just occasionally
> when it is rebooted i get these messages... and as i said
> after another boot it normally works fine. there is no
> lockout on hte administrator account so this can not be
> causing the problem... can it? i am open to suggestions.
>
> Chris
>
> >-----Original Message-----
> >Check your administrator account on the SBS. Check
> services that are running
> >with that account.
> >
> >Marina
> >
> >"Chris" <chrish@hibernafm.co.uk> schreef in bericht
> >news:567c01c3a8f7$206f9d40$7d02280a@phx.gbl...
> >> Hi All,
> >>
> >> I have a problem with one of my SBS server
> installations,
> >> it is as follows:
> >>
> >> sometimes when the server is rebooted or shut down and
> >> stared up again, i am unable to logon to it using the
> >> Administrator account and for that matter any other
> >> account with Admin rights. After a second reboot this
> >> normally clears.
> >>
> >> I also get messages in the event viewer around the same
> >> time:
> >>
> >> Event Type: Error
> >> Event Source: Service Control Manager
> >> Event Category: None
> >> Event ID: 7000
> >> Date: 11/11/2003
> >> Time: 17:16:23
> >> User: N/A
> >> Computer: SBSERVER
> >> Description:
> >> The Microsoft Exchange Event service failed to start
> due
> >> to the following error:
> >> Logon failure: account currently disabled.
> >>
> >> Event Type: Error
> >> Event Source: Service Control Manager
> >> Event Category: None
> >> Event ID: 7000
> >> Date: 11/11/2003
> >> Time: 17:16:23
> >> User: N/A
> >> Computer: SBSERVER
> >> Description:
> >> The IPSEC driver service failed to start due to the
> >> following error:
> >> Logon failure: account currently disabled.
> >>
> >> Event Type: Error
> >> Event Source: PolicyAgent
> >> Event Category: None
> >> Event ID: 321
> >> Date: 11/11/2003
> >> Time: 17:16:23
> >> User: N/A
> >> Computer: SBSERVER
> >> Description:
> >> IPSEC PolicyAgent Service: Ipsec Driver failed to
> start.
> >>
> >> Event Type: Error
> >> Event Source: PolicyAgent
> >> Event Category: None
> >> Event ID: 319
> >> Date: 11/11/2003
> >> Time: 17:16:23
> >> User: N/A
> >> Computer: SBSERVER
> >> Description:
> >> IPSEC PolicyAgent Service couldn't be started: Oakley
> >> failed to start.
> >>
> >> and many more but you get the idea... most are down to
> >> logon failure as for some reason it would seem that the
> >> localsystem account has been disabled.
> >>
> >> I am not running IPSec on this server! but i am under
> the
> >> impression that this is causing the fault from the
> above
> >> messages
> >>
> >> normally after this has happened the adminsitrator
> >> profile on the server has been reset, ie outlook
> >> settings, backgrounds etc.
> >>
> >> I attempted to apply SP1a to it yesterday and it kept
> >> telling me that it was not an SBS server, i even tried
> >> performing maintenance on the installation and this did
> >> not help, as yet i am unable to apply SP1a
> >>
> >> Windows is SP4 and i belive the Exchange is SP3 (by the
> >> OWA screen) the server runs fine normally but i would
> >> like to get this resolved, does anyone have any ideas??
> >> help would be appreciated
> >>
> >> i have not contacted MS yet about this problem and i am
> >> unable thus far to find any information about this
> >> particular problem so i though i would try here.
> >>
> >> TIA
> >>
> >> Regards
> >>
> >> Chris
> >
> >
> >.
> >