Security Log Event

From: Bryan Hughes (bthishughesis_at_brigidnotcollinsreal.org)
Date: 08/28/04 

Date: Sat, 28 Aug 2004 16:33:11 -0700

Hello,

I keep recieving this error in my security event log on SBS 2003 server:

Source: Security
Category: Logon/Logoff
Type: Failure Audit
Event ID: 537
User NT AUTHORITY\SYSTEM
Computer: MyPDC

Description:
Logon Failure:
  Reason: An error occurred during logon
  User Name:
  Domain:
  Logon Type: 3
  Logon Process: `pÖÌýÃ
  Authentication Package: NTLM
  Workstation Name:
  Status code: 0x80090308
  Substatus code: 0x0
  Caller User Name: -
  Caller Domain: -
  Caller Logon ID: -
  Caller Process ID: -
  Transited Services: -
  Source Network Address: -
  Source Port: -

What is the problem?

-TFTH
Bryan

Relevant Pages

  • Re: Failure Audit in Security Logs
    ... Event Type: Failure Audit ... Logon Failure: ... Logon Process: NtLmSsp ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Log Failure Audit
    ... Whenever an invalid logon occurs a "Failure Audit" event is written to the ... but the "Source Network Address" entry is always blank. ... Caller User Name: MyServer$ ...
    (microsoft.public.security)
  • Re: Failure Audit in Security Logs
    ... Event Type: Failure Audit ... Logon Failure: ... Logon Process: NtLmSsp ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Unknown user name or bad password
    ... Event Type: Failure Audit ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Failure Audit every 2 seconds
    ... Recently, on my Windows Small Business Server 2003, I have the following ... recorded in the Security Event log around every 2 seconds, ... Logon Failure: ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)