By some reason, one of our file servers (Windows Server 2003) no longer allows non-admins to access file shares. If adding the users into local administrators group, they can access the file shares again, so we have a working temporary workaround that we want to get rid of.
The user right "Access this computer from the network" looks ok when checking RSOP or gpedit. Another file server in same OU affected by same GPOs works doesn't have the issue. Checkin gthe secure channel to the domain with 'nltest /sc_query' and 'nltest
/sc_verify' looks ok on the problem server.
Is there anything in registry that can have become corrupt?
Failure audit message in security eventlog:
eventid 529
Unknown user name or bad password. Logon Type: 3 (network access)
Error message on client:
Logon failure: user account restriction. Possible reasons are blank passwords not allowed, logon hour restrictions, or a policy restriction has been enforced.