I’m having a problem with logging on a FM8 Advanced Server. I have 2 physical servers, both running Windows Server 2003 Standard Edition. One server is the FMSA8 host, the other runs IIS and the WPE piece. I am able to successfully publish FileMaker data to the web, but there is a strange logging problem. Every time the WPE sends a request to the FMSA8 server, data is returned successfully but an error is logged in the Windows security log file. (see below) This error is only cosmetic, but it’s beginning to be a problem for log auditing – It takes a lot of digging to tell which errors are legitimate failed user login attempts from FMPro clients and which are invalid error messages from the WPE.

What is interesting is that this error only shows up for native FileMaker accounts – authentication via Active Directory does not produce this log entry.

Any suggestions will be greatly appreciated!

From my Windows security log on the FMSA8 server:

==================================

Event Type: Failure Audit

Event Source: Security

Event Category: Logon/Logoff

Event ID: 529

Date: 12/11/2006

Time: 3:46:39 PM

User: NT AUTHORITYSYSTEM

Computer: FM-DB

Description:

Logon Failure:

Reason: Unknown user name or bad password

User Name: ppp-webwrite

Domain: FM-DB

Logon Type: 3

Logon Process: Advapi

Authentication Package: Negotiate

Workstation Name: FM-DB

Caller User Name: FM-DB$

Caller Domain: AD

Caller Logon ID: (0x0,0x3E7)

Caller Process ID: 1768

Transited Services: -

Source Network Address: -

Source Port: -

========================================

Event Type: Failure Audit

Event Source: Security

Event Category: Account Logon

Event ID: 680

Date: 12/11/2006

Time: 3:46:39 PM

User: NT AUTHORITYSYSTEM

Computer: FM-DB

Description:

Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

Logon account: ppp-webwrite

Source Workstation: FM-DB

Error Code: 0xC0000064

In IIS what is the setting for authentication? It should generally be allow anonymous logon.

Steven

Yes, it is set to anonymous. After lots of research, I have the feeling that my problem is Microsoft related, not FileMaker. It's just strange because logins are not actually denied, they just look like they are based on the logs. I'm pursuing multiple options to find a fix, I'll post back if I ever find one. Thanks!