Token-based server access validation failed with an infrastructure error

I would appreciate help with the following issue:

I have created a local group in our SQL 2008 server and added two Windows user accounts "DOMAIN\UserName"  I  then added the local group to the database and granted read only access.

The users are trying to link tables using MS Access using and ODBC connection and getting the following error.

Users are not system administrators.

Date                      6/30/2010 1:01:54 PM

Log                         SQ

Hi,

I have installed a named instance of SQL Server 2008 R2 Enterprise 64 bit on Windows Server 2008 R2 Enterprise 64 bit. The os is running as a VM ware virtual machine.

I have created an AD security group for database engine sys admins on that machine. I added my user to that group.So for example;

domainname\machinename_SQL_DBE_SysADmins is a user with SysAdmin server role permissions. User domainname\MichaelEFF is a member of this group.

When I log onto the machine as this user and run the management studio with run as administrator I cannot log into the database engine. The log shows the error:

Login failed for user: Reason:Token-based server access validation failed with an infrastructure error

I've read many posts where the MVP says that the UAC is not passing the group membership. Is this the case? If so then how will role based access ever be possible with windows authentication? How can this be resolved?

Thanks!

Michael

I'm trying to figure out this error but I can't point out what's exactly causing this.

Here is what's happening.

User loggs in for a few hours and gets "Validation of viewstate MAC failed" Error after post back.

I have set timeout in Web.config as follow.

<authentication mode="Forms">
            <forms timeout="540" slidingExpiration="true" loginUrl="~/maintain/login.aspx" />
</authentication>

in IIS I have set

ApplicationPool - Idle Time-out 60min

Sesstion State - Cookei Settings Mode: User Cookies, Time-out: 540min

And I'm using this ifame to prevent Idle

http://wiki.asp.net/page.aspx/1086/keep-session-alive/

Emplyee logges in for 8 hours and having this issue a few time a day...

Do you know what else I should look?

I don't know why session expires.

Thank you for your help

Emplyee

 Hello...

Let's say we have 2 time consuming functions, aaa and aaa1 inside a aspx page.

[WebMethod]
        public static string aaa(int i)
        {
            Thread.Sleep(1000);
            return i.ToString();
        }

        [WebMethod]
        public static string aaa1(int i)
        {
            Thread.Sleep(1000);
            return i.ToString();
        }

<div>
        <asp:ScriptManager ID="ScriptManager1" runat="server" EnablePageMethods="true">
        </asp:ScriptManager>
        <span id="displayspan"></span>
        <br />
        <input type="button" value=

So I am using the aspnet_regiis.exe tool to encrypt sections of the web.config in my asp.net applications and services.  I have done this for years successfully on Windows Server 2003 (IIS 6).  However I just moved some apps over to Windows Server 2008 R2 (with IIS 7.5) and I am now receiving the following error at runtime:

"Server was unable to process request. ---> Failed to decrypt using provider 'RsaProtectedConfigurationProvider'. Error message from the provider: Bad Data."

Now I am quite familiar with this process and am stumped at what I have missed this time around.  I have done ALL of the following which typically suffices for the process on the server. PLEASE READ ALL AND DO NOT PROVIDE RESPONSES OR LINKS FOR THINGS I HAVE ALREADY DONE Thanks!! 

1. Imported the keys to the server using aspnet_regiis -pi  Result: Success
2. Given FULL permission (using -full switch) using aspnet_regiis -pa to ALL of the following accounts  Result: Success

1. [SSRS 2008 R2]Report Builder Access error-The remote server returned an error: (401) Unauthorized.

     
   Hello,        I am able to login Web Service URL and report manager using computer name and report builder is also working fine.  http://RPTSRV/reportserver   (RPTSRV is report server name. web service url working fine. all accessible) http://RPTSRV/reports  (report manager working fine and all accessible ,report builder too) It means I am able to access everything locally right? http://rs.test.abc.com/reportserver  (web service url working fine. all accessible)  http://rs.test.abc.com/reports    (Report manager working fine and all accessible accept report builder)(I carefully checked the link and its taking rs.test.abc.com/reportserver.....)     when I click on reportbuilder button in report manager it shows me error dialog box with following error log!! I tried from local and remote computer too but gives the same error both side. I am not sure but I am just thinking is this double hop kerberos security issue? Please help me to solve this problem. I am finding solution from last 4 days. Reporting Service configuratin tool settings Web Serivice URL -  all set to default Report Manager URL - all set to default Environment - Distributed deployment Server1(report_srv) --Windows server 2003, Installed sql server 2008R2 reporting service,