CSNW Fails to Connect to Preferred Server (164763)

SYMPTOMS

Client Services for NetWare (CSNW) clients may fail to connect to their preferred server with the following error:

NetWare Authentication Failure

You cannot be authenticated on <server> due to the following reason: A connection to the server could not be made because the limit on the number of concurrent connections for this account has been reached.

Do you want to select another preferred server?

CAUSE

This problem only occurs if the following steps are used:

A CSNW client creates a new printer, or prints to an existing printer during a logon session.
The CSNW client logs out.
The CSNW client immediately logs back on as the same user without restarting the workstation.

The problem occurs because the previous preferred server connection is never closed. It may fail to close if the Logon User ID (LUID) for the previous logon session was not released after a new printer was created or if an existing printer was used.

The previous logon session was not released because its LUID, which is maintained by the kernel, has a reference counter that is incremented when the user's credentials are impersonated (used) and decremented when the impersonation is released.

When the reference counter for an LUID reaches 0, the kernel notifies the Local Security Authority (LSA) that the user has logged out. The LSA then notifies CSNW to disconnect the user's preferred connection to the NetWare server. In this case, the LUID for the user who is currently logged on is never decremented to 0, so the LSA is never notified, which causes CSNW to never be notified of the logout to disconnect from the preferred server.

RESOLUTION

Currently, only a workaround exists for this problem. To enable the workaround, use the following steps:

For Windows NT 4.0

Whenever a new printer is created, shut down and restart the workstation at the end of the day instead of logging out.
Disable all spooler event logging using the following steps:
1. Open Printers in Control Panel.
2. Click File and select Server Properties.
3. Click the Advanced tab on the Print Server Properties page.
4. Disable all Log Spooler options.
5. Click OK, and then shut down and restart.

For Windows NT 3.51

Whenever a new printer is created, shut down and restart the workstation at the end of the day instead of logging out.
Disable all spooler event logging using the following steps:

WARNING: Using Registry Editor incorrectly can cause serious, system- wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk.
1. Run Registry Editor (regedt32.exe).
2. Go to the following key:
  HKEY_Local_Machine\System\CurrentControlSet\Control\Print\Provide
3. Add the following value:
```
      EventLog = REG_DWORD 0x00000000
						
```
4. Close Registry Editor, and then shut down and restart.

For Windows 2000

Clear the following check boxes to work around this behavior:

Log Spooler error events
Log Spooler warning events
Log Spooler Information events