I get a logon failure: unknown user or bad password error

Article:TECH16969  |  Created: 2006-08-23  |  Updated: 2007-08-30  |  Article URL http://www.symantec.com/docs/TECH16969
Article Type
Technical Solution


When I attempt to audit a system, I get a "System error 1326: Unknown user or bad password". I can remote logon to the target system using the same credentials. Why am I getting this error?


The 1326 error is a Microsoft error. In this case, the credentials being used were a local account, not a domain account.  SecurityExpressions assumes domain credentials unless the local account is specified. To specify the local credentials, use the system name or IP before the username when entering the credentials.

For example, if the username is jsmith and the system is testsystem then to use the local account the credentials would be entered as testsystem\jsmith.

Legacy ID


Article URL http://www.symantec.com/docs/TECH16969

Terms of use for this information are found in Legal Notices