Home
  •  

Authentication/Accounting failure Monitor

Microsoft.Windows.Server.RRAS.AuthenticationAccountingfailure (UnitMonitor)

The Routing and Remote Access service encountered an error while performing authentication or accounting.

Knowledge Base article:

Management Pack

Summary

The Routing and Remote Access service encountered an error while performing authentication or accounting.

 

Causes

The most common reasons for this error are:

1.     The RADIUS server did not respond to an authentication or an accounting request.

2.     The service failed to retrieve a usable Remote Access Server certificate.

3.     The connection attempt failed because Windows Authentication could not authenticate the user. The user might have specified incorrect credentials.

4.     The RADIUS server sent an invalid response.

 

Resolutions

1.     Open Routing and Remote Access and verify that:

                      i.        The server DNS name or IP address of the RADIUS server(s) is entered correctly.

                     ii.        The secret used to connect to the RADIUS server(s) is entered correctly.

2.     Make sure that the user specifies correct credentials.

3.     Verify whether the network protocols are correctly configured on the server and the client.

 

Sample Event

Sample Event #1: The RADIUS server %1 did not respond to the initial request. Please make sure that the server name or IP address and secret are correct.
Sample Event #2: Could not retrieve the Remote Access Server's certificate due to the following error: %1
Sample Event #3: The user %1 failed an authentication attempt due to the following reason: %2
Sample Event #4: The user %1 connected from %2 but failed an authentication attempt due to the following reason: %3
Sample Event #5: An invalid response was received from the RADIUS server %1. %2

 

© 2004 Microsoft Corporation, all rights reserved.

 

Element properties:

TargetMicrosoft.Windows.Server.RRAS.2008.Server
Parent MonitorSystem.Health.ConfigurationState
CategoryConfigurationHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.SingleEventLogManualReset2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Authentication/Accounting failure Monitor
The Routing and Remote Access service encountered an error while performing authentication or accounting.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.Server.RRAS.AuthenticationAccountingfailure" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.Server.RRAS.2008.Server" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" ConfirmDelivery="true">

  <Category>ConfigurationHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Server.RRAS.AuthenticationAccountingfailure_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Error"/>

    <OperationalState ID="ManualResetEventRaised" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>System</LogName>

    <Expression>

      <And>

        <Expression>

          <RegExExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>MatchesRegularExpression</Operator>

            <Pattern>^(20146|20168|20187|20189|20196)$</Pattern>

          </RegExExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">RemoteAccess</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>