BR Client Server in Windows Server 2012

[Gabriel]

I'm installing Client Server for BR 4.31ib, and I'm able to log in just fine using my account. I am an Administrator and I am a member of the Administrators Group.

However, I'm unable to make it work for other accounts, which are also Administrators and members of the Administrators group. I get error SSL_shutdown the Underlying BIO reported an error 10053.

I know they need to have the Allow Log-on Locally permission, and that permission is in the Administrators group. I also gave "Everyone" full rights to the folder that the server and programs and data files are installed in, including the folder for the brlistener.log.

Can anyone think of any other permissions or settings that I need to set to get them to be able to log in under Windows Server 2012?

Gabriel

[Gabriel]

This is the error message I see in the logfile:

Creating process as user C:\Sherman\Live\VOL002\brserver.exe CLIENT_SERVER:1a4NO_DB_PASSWORD failed 267.

Does anybody know what that means?

Gabriel


(6) - 11/20/2015 09:43:32
Security process has started with command C:\Sherman\Live\VOL002\brserver.exe, startdir C:\Sherman\Live\VOL002, logfile C:\Sherman\brlistener.log, loglevel 10, stderr file NULL, socket handle 1a4, anonymous NULL
(8) - 11/20/2015 09:43:32
Security process has negotiated an SSL connection
(9) - 11/20/2015 09:43:32
Starting interactive security.
(9) - 11/20/2015 09:43:32
Sending password request to client.
(9) - 11/20/2015 09:43:32
Waiting for password attempt from client.
(9) - 11/20/2015 09:43:46
Examining client response.
(8) - 11/20/2015 09:43:46
Checking username/password as entered
(9) - 11/20/2015 09:43:46
Starting OS auth check.
(9) - 11/20/2015 09:43:46
OS auth check finished successfully.
(5) - 11/20/2015 09:43:46
Logon attempt was successful.
(9) - 11/20/2015 09:43:46
Password accepted - inform client.
(9) - 11/20/2015 09:43:46
Passed interactive security.
(8) - 11/20/2015 09:43:46
Executing command C:\Sherman\Live\VOL002\brserver.exe, with startdir C:\Sherman\Live\VOL002
(0) - 11/20/2015 09:43:46
Creating process as user C:\Sherman\Live\VOL002\brserver.exe CLIENT_SERVER:1a4NO_DB_PASSWORD failed 267.

[dmeenen]

Gabriel,
Have you tried disabling SMB 2.0 on both the server and the client?
Google "How to Disable SMB 2.0 on Windows"
for the specific instructions.

Good Luck,
Doug Meenen

[dmeenen]

https://support.microsoft.com/en-us/kb/2696547

[bluesfannoz]

Make sure the users are allowed to login remotely on the server. Adding them to the remote desktop users group is the easiest way. There is an individual option to just allow that without allowing Remote Desktop access as well. But it takes more digging to find and I am not sure where that is on 2012 server.

[bluesfannoz]

Should have read all of your message.

You need to set a password for them. They are currently set that the next time they logon their password needs to change. That interferes with BR authentication. Turn off password must be changed.

[Gabriel]

I will try these things. Thank you all for your help. However:

1) I was able to create several other new users and they work. They are administrators, (and their passwords are set to not change). It seems to be only users that aren't Administrators that can't join (even though they're in the Administrator Group).

2) When I needed to change my Password, BR gave an appropriate error message saying "You can't log on because your password needs to change. log into the server first.

gabriel

[GomezL]

I forget the specifics, but you need to setup

ALLOW LOCAL LOGIN on the Server.

[Gabriel]

Yes, we have that set up. By default members of the Administrators Group have that right.

People who are Standard Users but are members of the administrators group are not able to log on.

People who are Adminstrators AND are members of the Administrators group ARE able to log on.

But they would prefer to not make every user an Administrator, for the obvious reasons.

Gabriel

[bluesfannoz]

What are the permissions set on the C:\Sherman\Live\VOL002 folder for these users?