Re: Authentication failures



You have the answer in the Event Log you posted.

Logon Failure:
Reason: Unknown user name or bad password

Check the user account and make sure it is not locked out.


"Mike Bannister" <mbannist@xxxxxxxxx (donotspam)> wrote in message
news:2B455FA6-F4D1-46F9-B1EA-2A321120CD9F@xxxxxxxxxxxxxxxx
I am running SBS 2003 Sp1 with all XP pro clients. One of the clients has
suddenly started causing security event 529 as well as a netlogon failure
event 5722. I have tried deleting machine from domain and rejoining and
it
did not solve issueThe logs shows the following:

Source Event ID Last Occurrence Total
Occurrences
Security 529 2/3/2006 5:23 AM 26 *
Logon Failure:
Reason: Unknown user name or bad password
User Name: JeanHinsley
Domain: BCCIPDC
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: BCCIJHINSLEY
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.0.33
Source Port: 3391


Source Event ID Last Occurrence Total Occurrences
NETLOGON 5722 2/3/2006 4:25 AM 6 *

The session setup from the computer BCCIJHINSLEY failed to authenticate.
The
name(s) of the account(s) referenced in the security database is
BCCIJHINSLEY$. The following error occurred: Access is denied.

Thanks in advance for your help...

--
Mike Bannister


.



Relevant Pages

  • RE: Critical Errors in Security Log, Logon Failures
    ... Microsoft CSS Online Newsgroup Support ... Critical Errors in Security Log, Logon Failures ... < Reason: Unknown user name or bad password ... < Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Log Event ID 529 - Bad password?
    ... description says Unknown user name or bad password. ... the Caller Logon ID and Caller Process ID refer? ... Workstation Name: SBS Computer Name ...
    (microsoft.public.windows.server.sbs)
  • Re: Failed Logins
    ... could be many reason. ... authentications via IIS? ... > Logon Failure: ... Unknown user name or bad password ...
    (microsoft.public.inetserver.iis)
  • Re: Security Event Log problem
    ... At that time someone tried to logon to the computer using the administrator ... Unknown user name or bad password ... > Logon Process: Advapi ... > Caller Domain: WORKGROUP ...
    (microsoft.public.security)
  • Re: Hacker trying to get into our network
    ... Logon Failure: ... Logon Process: NtLmSsp ... Caller User Name: - ... a reason he listed my IP address and not the name of my domain? ...
    (microsoft.public.windows.server.sbs)

Quantcast