Integrated Windows Authentication results in -2146893052 (0x80090304)

19 Jul 2006 6:39 AM

mmichaels

I have a website on Windows 2000 server with only IWA enabled. I can
log into the site just fine, but if I type a bad password I get an HTTP
500 error. I can't figure out why I'm not reprompted for the password
at least another time or two.

I turned off "friendly errors" in IE and I now get -2146893052
(0x80090304) (also get the same in Firefox).

My local policy effective setting for "cached passwords" is set to 10.

Can anybody shed some light on why I'm only prompted for a password
once?

Marc

20 Jul 2006 2:22 AM

Ken Schaefer

Err 0x80090304
Local Security Authority could not be contacted

Seems IIS has a problem talking to LSASS, which would also explain why you
are not prompted again. Is there anything in the Windows Event Logs that
might help troubleshoot the problem?

Cheers
Ken

Show quoteHide quote

"mmichaels" <marc.micha***@trimor.com> wrote in message
news:1153291145.397032.120340@i3g2000cwc.googlegroups.com...
>I have a website on Windows 2000 server with only IWA enabled. I can
> log into the site just fine, but if I type a bad password I get an HTTP
> 500 error. I can't figure out why I'm not reprompted for the password
> at least another time or two.
>
> I turned off "friendly errors" in IE and I now get -2146893052
> (0x80090304) (also get the same in Firefox).
>
> My local policy effective setting for "cached passwords" is set to 10.
>
> Can anybody shed some light on why I'm only prompted for a password
> once?
>
> Marc
>

20 Jul 2006 3:30 AM

mmichaels

Hi Ken,

Your lead on LSASS should be helpful. All I'm getting is a failure in
the security log:

Source: Security
Category: Logon/Logoff
Type: failure
Event ID: 537
User: NT AUTHORITY\SYSTEM
Computer: MYIISCOMPUTERNAME

Logon Failure:
    Reason:        An unexpected error occurred during logon
    User Name:               myu***@mydomain.com
    Domain:
    Logon Type:    3
    Logon Process:    NtLmSsp
    Authentication Package:    NTLM
    Workstation Name:    ITDIRECTOR

Also the mydomain.com is an OU that is nested within my root domain.

20 Jul 2006 3:56 AM

Ken Schaefer

And there is nothing useful in the System or Application event logs?

Cheers
Ken

Show quoteHide quote

"mmichaels" <marc.micha***@trimor.com> wrote in message
news:1153366220.853486.11350@i3g2000cwc.googlegroups.com...
> Hi Ken,
>
> Your lead on LSASS should be helpful. All I'm getting is a failure in
> the security log:
>
>
> Source: Security
> Category: Logon/Logoff
> Type: failure
> Event ID: 537
> User: NT AUTHORITY\SYSTEM
> Computer: MYIISCOMPUTERNAME
>
> Logon Failure:
> Reason: An unexpected error occurred during logon
> User Name: myu***@mydomain.com
> Domain:
> Logon Type: 3
> Logon Process: NtLmSsp
> Authentication Package: NTLM
> Workstation Name: ITDIRECTOR
>
> Also the mydomain.com is an OU that is nested within my root domain.
>