Status 0xc0000225 Expand / Collapse
Author
Message
Posted 2/1/2012 6:02:44 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 2/1/2012 5:55:19 PM
Posts: 2, Visits: 1
I found a scenario that generated a failure audit for Event 4625 using NTLM with excerpt as follows:

Failure Reason: An Error occured during Logon.

Status: 0xc0000225

Sub Status: 0x0

This occurred attempting to connect a CIFS mount from Red-Hat Linux to Windows Server 2008 R2. The mount had worked in Server 2003 but failed on 2008 R2. I discovered the following registry hotfix that addresses the issue which I confirmed with a network trace was exactly as described in KB 957441:

Client connections return a "STATUS_INVALID_PARAM" error code when you use a "Send NTLMv2 response only" authentication level in Windows Server 2008 or in Windows Vista

http://support.microsoft.com/kb/957441

In this case the status seems to be a generic indicator of "something is wrong with the NTLM negotiation."

Post #906
Posted 2/20/2012 4:53:51 PM
Security Log Nerd

Security Log NerdSecurity Log NerdSecurity Log NerdSecurity Log NerdSecurity Log NerdSecurity Log NerdSecurity Log NerdSecurity Log Nerd

Group: Administrators
Last Login: 4/16/2009 1:11:51 PM
Posts: 49, Visits: 0
Thanks!
Post #929
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:59am