SY0-501 · Question #356
The IT department is deploying new computers. To ease the transition, users will be allowed to access their old and new systems. The help desk is receive reports that users are experiencing the…
The correct answer is C. Certificate issues. In a dual-system transition environment, 'Logon Failure: Access Denied' errors are commonly caused by certificate issues, particularly when smart card or certificate-based authentication is involved and the old system cannot validate the user's new or updated certificates.
Question
The IT department is deploying new computers. To ease the transition, users will be allowed to access their old and new systems. The help desk is receive reports that users are experiencing the following error when attempting to log in to their previous system:
Logon Failure: Access Denied Which of the following can cause this issue?
Options
- APermission issues
- BAccess violations
- CCertificate issues
- DMisconfigured devices
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C78% (18)
- D13% (3)
Why each option
In a dual-system transition environment, 'Logon Failure: Access Denied' errors are commonly caused by certificate issues, particularly when smart card or certificate-based authentication is involved and the old system cannot validate the user's new or updated certificates.
Permission issues would typically cause errors related to specific resource access denials after logon, not a failure at the authentication/logon stage itself.
Access violations refer to unauthorized attempts to access restricted memory or resources at the OS/application level, not an authentication failure during the logon process.
When organizations deploy new computers, user certificates or smart card certificates may be updated or re-issued, causing the old system to fail authentication because it cannot validate the new certificate chain or the old certificate has been superseded. Certificate-based authentication failures manifest as 'Logon Failure: Access Denied' because the credential presented cannot be verified, even though the user's account and permissions are otherwise intact. This is a known issue in environments using PKI or smart card logon during hardware refresh cycles.
Misconfigured devices could cause connectivity or policy issues, but in the context of a system transition with this specific logon error, it does not directly explain why existing user credentials fail on the old system.
Concept tested: Certificate-based authentication failure during system transition
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/smart-card-logon-authentication-issues
Topics
Community Discussion
No community discussion yet for this question.