Sta1 I assume would more than likely have to be the PDC em to make that work.... never tried it with STAs on DCs though. Ron Oglesby Senior Technical Architect =20 RapidApp Office 312.372.7188 Mobile 312.961.2380 email roglesby@xxxxxxxxxxxx =20 -----Original Message----- From: Jim Hathaway [mailto:JimH@xxxxxxxxxxxxxxx]=20 Sent: Monday, October 28, 2002 10:56 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] odd issue with Secure gateway STA's This is an odd one. Got a client site with a standard installation of Nfuse with secure gateway. Nfuse and CSG servers are in the DMZ with valid certs from trusted authorities, and we're load balancing the STA's which sit in the LAN on Win2k IIS servers.=20 =20 The one snag here is the STA servers are domain controllers. I can't really change that at this point.=20 =20 Here's my problem. Everything works fine for a few weeks, and then these errors start cropping up in the event logs on the STA's.=20 =20 Event id - 10004 - from Dcom =20 DCOM got error "Logon failure: the user has not been granted the requested logon type at this computer. " and was unable to logon .\IWAM_DCname in order to run the server: {3D14228D-FBE1-11D0-995D-00C04FD919C1} =20 Event id - 36 - from w3svc =20 The server failed to load application '/LM/W3SVC/1/ROOT'. The error was 'The server process could not be started because the configured identity is incorrect. Check the username and password. =20 These errors start showing up when a user attempts to connect to the Nfuse site, gets their applist and clicks on a link . . . which fails citing . . "Non of the configured STA's are available".=20 =20 Tracking this down, I've found that the Iwam and Iuser accounts are somehow out of synch on the servers (they autochange their passwords). The admin script synchiwam.vbs resynchs them . . and the STA's work again for a few weeks.=20 =20 So, I have a fix, but not a permanent solution. Anyone one else run into anything like this . . and have any suggestions? =20 Thanks,=20 =20 J ********************************************** This weeks Sponsor NetX Inc Thin Client NetX Develops XP and NT Embedded=20 Thin Client Solutions, Easy to Configure,=20 Extremely Secure, and Remotely Managed. Check out our recently updated website at http://www.netxinc.com *********************************************** Visit Jim Kenzig of thethin.net at the Emergent Online Booth #26 at Citrix Iforum 2002! Register now at: http://www.citrixiforum.com/registerNow.html ***********************************************=20 For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ********************************************** This weeks Sponsor NetX Inc Thin Client NetX Develops XP and NT Embedded Thin Client Solutions, Easy to Configure, Extremely Secure, and Remotely Managed. Check out our recently updated website at http://www.netxinc.com *********************************************** Visit Jim Kenzig of thethin.net at the Emergent Online Booth #26 at Citrix Iforum 2002! Register now at: http://www.citrixiforum.com/registerNow.html *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm