You are viewing limited content. For full access, please sign in.

Question

Question

AD user cannot login

asked on February 19, 2015

Have a user that is created under Windows Accounts (not Laserfiche user).  Cannot login as that user into Laserfiche.  I deleted the user and tried re-creating, no success.  The user is a Supervisor, so the group they are a part of has acccess everything, and other users have no issue.  I do not have access to their AD, so I'm curious as to what things I can do to troubleshoot before getting their IT involved?

 

Thanks!

0 0

Answer

SELECTED ANSWER
replied on February 19, 2015

A support case was opened. Upon further investigation, the old password was stored on that workstation and had been associated with the Laserfiche Server. The resolution was to update the stored password by doing the following:

  1. Open the run command in Windows and run the following: rundll32.exe keymgr.dll, KRShowKeyMgr
  2. In the "Stored User Names and Passwords" dialog, edit the item that represents the Laserfiche Server
  3. Set the new password for the Windows account

 

Alternatively, if it's not needed, then the Laserfiche Server listing there can probably just be removed. That way the next time the Windows user changes their password, they won't run into this again.

1 0

Replies

replied on February 19, 2015 Show version history

What is their Authentication set to? If it's not already, try switching it to "Trust: Allow Access".

 

0 0
replied on February 19, 2015

It's set to Trust: Allow access

0 0
replied on February 19, 2015

Does he belong to any Windows security group ? Does that group exist in LF > windows Accounts ? And is that group set to "deny". Remember Deny is the king of kings !

 

So confirm that the group this user belongs to does not have "deny" set on the group ! If that is not the case look at your license manager and make sure the dcs group membership is being synced ok ! And the fact that you see this user in the license manager and has full license assigned.

It would be nice if you could provide with screenshot of what message the user sees when trying to login to LF.

0 0
replied on February 19, 2015

There is no license manager this is not a RIO install.  The users is a Manager, so as far as their AD account, they will have more rights than any of the other users I set up.  Also, there are not Windows Groups setup in Laserfiche under Windows Accounts...just individual windows accounts.

0 0
replied on February 19, 2015

What is the exact text of the message received when this particular user attempts to login to the repository?

0 0
replied on February 19, 2015

Permission Denied.

Access denied. [9013]

0 0
replied on February 19, 2015

So the user in question is logged into Windows on their workstation and trying to log into the repository using the Laserfiche Client and Windows Authentication? If they uncheck "Use Windows Authentication" and instead log in by manually typing in their Windows credentials, does it work or is there still an error?

0 0
replied on February 19, 2015

Yes, user can login typing in Windows Credentials.

0 0
replied on February 19, 2015

Did the user change their password recently? If so, has the workstation been rebooted and/or has the user logged out and logged back into Windows using the new password?

Please have the user reboot the computer and then log back into Windows and try using the Client again with the "Use Windows Authentication" checkbox. If there's still an issue then open a support case so the matter can be further investigated.

0 0
replied on February 19, 2015

Yes, a few days ago, but has rebooted numerous times since...and rebooted again today for me.  Still same issue.

0 0
SELECTED ANSWER
replied on February 19, 2015

A support case was opened. Upon further investigation, the old password was stored on that workstation and had been associated with the Laserfiche Server. The resolution was to update the stored password by doing the following:

  1. Open the run command in Windows and run the following: rundll32.exe keymgr.dll, KRShowKeyMgr
  2. In the "Stored User Names and Passwords" dialog, edit the item that represents the Laserfiche Server
  3. Set the new password for the Windows account

 

Alternatively, if it's not needed, then the Laserfiche Server listing there can probably just be removed. That way the next time the Windows user changes their password, they won't run into this again.

1 0
replied on January 3, 2018

This can also be caused by the properties for the Everyone user.  Remember by default all users are part of the  "Everyone" User. 

In the Laserfiche Admin Console check the following:

Users and Groups - Everyone - Properties

Make sure it is set to either

Trust: allow Access

or

Not Set.

 

If it is set to Deny:deny access you can get the same error using Windows authentication, 

If Laserfiche Users are not asked for a user and password, make sure that the master ADMIN user has a password,

 

 

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.