iis5 ssl security issue -- iis security

Param R.
12/3/2004 9:03:08 AM

Hi all, we have a iis5 box that has a website running over ssl and has
client cert mapping enabled mapped to a local user account. Everything was
working OK. We recently moved the box to a domain environment and switched
the mapped user account from a local account to a domain account and now we
have begun seeing the following errors in the Event Logs. The website still
loads up though:-

System Event Log Error

Logon failed for user LGDATACENTER\moses : Logon failure: the user has not
been granted the requested logon type at this computer.
..
For additional information specific to this message please visit the
Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp.

Security Event Log Failure

Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: moses
Domain: LGDATACENTER
Logon Type: 2
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: WEBSERVER

I have verified the user account has the following privileges:-

1. Access this computer from the network
2. Log on locally
3. Impersonate a client after authentication.

Please help! thanks!

Param R.
12/4/2004 12:20:01 PM

Now if I change the user to a user who is member of Administators, then I
dont get the errors anymore. What am I missing?

thanks!

[quoted text, click to view]

iis security : iis5 ssl security issue