Login Failures

From: "Brandon" <bsmith@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 26 Apr 2006 09:05:33 -0500

I have one user that keeps showing up in the SBS security log with MANY
success and failure audits, but I don't know why. They total about 30
audits per SECOND. The failure audits are all Kerberos 537 errors, while
there are several success audits including assigning special privileges
(576) and authentication package (680). Any idea what might be going on?

--
Brandon
Presentations Direct - "Document Finishing Solutions"
http://www.presentationsdirect.com

.

Follow-Ups:
- RE: Login Failures
  - From: Steven Zhu [MSFT]

Prev by Date: two SBS machines on the same network
Next by Date: RE: Remote connectivity problems
Previous by thread: two SBS machines on the same network
Next by thread: RE: Login Failures
Index(es):
- Date
- Thread

Relevant Pages

WINDOWS2000 Login audits
... when you have success and failure audits in event viewer ... (including security). ...
(microsoft.public.win2000.security)
Help with Failure Audits
... I am getting the following failure audits in Event Viewer daily. ... DC that the audits are showing up on. ... One may be "create child" ... Object Operation: ...
(microsoft.public.windows.server.networking)