Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Network Performance Monitor (NPM) > Logon Failure: the user has not been granted the requested logon type at this computer

Logon Failure: the user has not been granted the requested logon type at this computer

Created by Interspire Import, last modified by Shane Robinson on Dec 21, 2016

Views: 1,533 Votes: 12 Revisions: 14

Overview

The following error appears when an an Active Directory (AD) user logs in to the Orion Web Console:

Logon Failure: the user has not be granted the requested logon type at this computer

Environment

Orion Core 2011.1 and later

Cause

Automatic login is not enabled. SolarWinds uses Internet information Services (IIS) to authenticate AD users of the Orion Web Console, and the Allow log on Locally permission is required

Resolution

Perform either of the following actions:

Allow log on locally

Add the AD accounts to which you want to grant web console access to the Allow log on locally Group Policy on your SolarWinds server. For more information about configuring this group policy on Windows Server 2003, see the Microsoft TechNet article, Allow log on locally. For more information about configuring this group policy on Windows Server 2008 R2, see the Microsoft TechNet article, Grant a Member the Right to Logon Locally.

Enable Automatic login

  1. In the Orion Web Console, click Settings > Web Console Settings > Windows Account Login.
  2. Select Enable Automatic Login, and then click Submit.

Notes:

  • This approach will only work if authentication is performed by IIS and not by the Orion Web Console. As a result, this approach will only work for browsers that support NT LAN Manager (NTLM) Authentication. Internet Explorer supports NTLM by default, and Firefox will allow NTLM Authentication, as indicated in the SolarWinds Knowledge base article, How to configure Firefox to accept Active Directory credentials when logging in to the Web Console.
  • The user will need to be logged under the same account to windows for Automatic Login to function.
  • If the customer is not allowed to give the user Allow log on Locally rights and Automatic log on does not resolve the issue for them, as they will still not be able to use the Orion log on you can turn on Log on fall back by doing the steps below,
  1. Browse to c:\inetpub\SolarWinds\ (default)
  2. Edit web.config.
  3. Search this key:
    <add key="LogonFallback" value="false" />
  4. Set to true: 
    <add key="LogonFallback" value="true" />
  5. Save file.
  6. Run iisreset
  • Also run the following query against the Solarwinds database,
IF NOT EXISTS (SELECT [SettingName] FROM [dbo].[WebSettings] WHERE [SettingName]='LogonFallback')
BEGIN INSERT INTO [dbo].[WebSettings] ([SettingName],[SettingValue]) VALUES ('LogonFallback','True') END    
ELSE BEGIN UPDATE [dbo].[WebSettings] SET [SettingValue]='True' WHERE [SettingName] = 'LogonFallback' END

After making the changes to the file above and running the query the customer should be able to use the Orion Log on prompt to log on to the Web Console with out giving the local permission to the user for Allow log on locally.

Last modified
10:13, 21 Dec 2016

Tags

Classifications

Public