Re: Security Event 529...please help....

Yes, I have done that and it does not matter if anyone is logged on or not.
Like others, I have found the following processes seem to be generating the
error.
inetinfo.exe
store.exe
wmiprvse.exe
The account that is creating the logon error is the system account, although
it is working with the other processes without problem. So I guess the
question is why are these three processes having problems with the system
account and what is the fix?



"cjobes" wrote:

If the error shows up when there is no other box on the network that would
indicate that you have a service running on the server that doesn't have the
correct credentials. I would suggest a test. Clear the event log, log off,
let it sit for a few hours, log back on and see if those error were created
while you were logged off. That way you can eliminate half of the
possibilities.

Claus

"RichardF" <RichardF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:21CEEF60-B083-404C-A3EE-EE1477A34D35@xxxxxxxxxxxxxxxx
Thanks for the response. The server name is SBS1. The errors occur even
when
it is the only computer on the network. This is not a production
environment,
only a lab machine. Basic out of the box installation, SP1 and all current
patches installed and Exchange SP2 installed.
I have tried rebooting the server several times. I do have a workstation
on
the network that is only turned on occasionally. I will try your
suggestion
to disjoin and then rejoin the machine to the network and see if that
helps,
even though the errors occur with the same freqency if the workstation is
online or not.
Thanks for the help.
I would not like to be trying to explain to a client why all these errors
were happening on thier production server. Seems like it is a frequent
problem after looking at other post on this newsgroup though.

"cjobes" wrote:

Is you laptop name SBS1?

This can happen if you have a presistent network connenction or a service
with an invalid password. Disjoin the laptop from the domain, reboot and
then use connectcomputer to join it back in. See if the error still shows
up.

Claus

"RichardF" <RichardF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EA12679A-3FF5-41FB-8533-ACC5174E65D6@xxxxxxxxxxxxxxxx
Has anyone found a fix for this yet?
I have a lab computer with SBS 2003 standard SP1 and all current
patches.
I
powered down the computer a couple of months ago and recently started
it
back
up for another project. After applying the current patches I started
having
this same problem soon after.
From the server report:

Source Event ID Last Occurrence Total Occurrences
Security 529 5/13/2006 5:45 AM 2,049 *
Logon Failure:
Reason: Unknown user name or bad password
User Name: SBS1$
Domain: FRYSNETSERVICES
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: SBS1
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -

I receive about 2100 entries a day. I only have one workstation on the
network and it is rarely turned on.

Thanks for any help.


"Art Vandalay" wrote:


Brand new SBS 2003 Server setup with SBS 2003 SP1, Exchange 2003
Server SP2, and all the latest patches from Microsoft Update site is
producing the following event in the Security Event Log:

Source : Security
Category : Logon/Logoff
Event ID : 529
Logon failure
Reason : Unknown user name or bad password
Username : SERVER1$
Domain : SYS3
Logon Type : 3
Logon Process : NtLmSsp
Authentication Package : NTLM
Workstation Name : SERVER1
Caller User Name : -
Caller Domain : -
Caller Logon ID : -
Caller Process ID : -
Transited Services : -
Source Network Address : -
Source Port : -

I've isolated the PIDs producing the event to the following processes:

inetinfo.exe
store.exe
wmiprvse.exe

As always, any help is greatly appreciated....







.

Relevant Pages

  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.general)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.dns)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.networking)
  • Re: Logon Server Unavailable
    ... The server is not configured for transactions" ... "Access Denied" Message When Opening from or Saving to a Network Folder ... Logon unsuccessful: The user name you typed is the same as the user name you ... "An error occurred while renewing interface local area connection" While ...
    (microsoft.public.windows.server.networking)
  • Re: Logon Server Unavailable
    ... The server is not configured for transactions" ... "Access Denied" Message When Opening from or Saving to a Network Folder ... Logon unsuccessful: The user name you typed is the same as the user name you ... "An error occurred while renewing interface local area connection" While ...
    (microsoft.public.windows.server.general)