logo
Powered by QM on a Rpi server
Home
About OpenQM
Sales and Downloads
Help and Support
About
Login

KnowledgeBase 00004: Unable to Login on Windows

Last updated: 17 Feb 2017
Applies to: Windows NT and later
Search  
Top level index       Full Index Search Tips
Previous article     Next article

Overview

Users logging in to QM over a network, including looped back to the same system, are subject to username and password authentication by Windows. There are several reasons why such logins can fail. This article describes the causes, diagnostics and fixes for login problems. Except where specific versions of Windows are referenced, information in this article should be applicable to all Windows variants.


User Names

Users running Windows XP-Home can set up their system to operate without needing entry of authentication details to use the console. Users entering the system via a network connection, however, must pass through user authentication and hence must have a valid user name and password that is known to Windows. This can be set up using the User Accounts area of the Windows Control Panel.


Domain Login

If your system is using domain based logins, the user name entered when logging in to QM must be of the form
     username@domain


Permissions

As a first step in resolving permissions related problems, ensure that all users have full access to the QMSYS account directory and all of its substructures. More precise permission settings can be implemented in accordance with the details in the System Administration section of the QM Reference Manual.


Policy Settings

Windows has many security policy settings that impact system security. To find these:

  1. Open the Windows Control Panel.
  2. Double click on Administrative Tools.
  3. Double click on Local Security Policy.
  4. Expand the Local Policies entry in the left pane of this window.

Some key policy settings to check in the User Rights Assignment area are:

  • Access this computer from a network
  • Deny access to this computer from a network


QMSvc Diagnostics

User authentication in QM is handled by the QMSvc service. Failure to login will log a diagnostic message in the qmsvc.log file in the QMSYS account directory. This message shows the IP address of the incoming connection and the Windows error number. The error code reported by Windows is not very explicit, often nothing more than "login failed" (error code 1326). This is possibly because providing detailed diagnostic codes might assist in cracking passwords. More detailed diagnostics can be obtained by enabling auditing of failed logins. To do this:

  1. Open the Windows Control Panel.
  2. Double click on Administrative Tools.
  3. Double click on Local Security Policy.
  4. Expand the Local Policies entry in the left pane of this window.
  5. Dive into Audit Policy.
  6. Double click on Audit Account Logon Events.
  7. Select to audit failure and click on OK.

When a login failure occurs:

  1. Open the Windows Control Panel.
  2. Double click on Administrative Tools.
  3. Double click on Event Viewer.
  4. Select the Security entry in the left pane of this window. On Windows Vista, this is in the Windows Logs area.
  5. Examine the Failure Audit event and note the hexadecimal error code.

Error CodeDescription
C0000064User login with misspelled or bad user account
C000006AUser name is correct but password is wrong
C000006DUser logon has incorrect user name
C000006FUser tried to logon outside authorised hours
C0000070Logon from unauthorised workstation
C0000071Expired password
C0000072Account is currently disabled
C0000193Account expiration
C0000224User is required to change password at next logon
C0000234Account is locked


Related Articles

None.



Please tell us if this article was helpful
Very     Slightly     Not at all
Comments
Email (optional)