Event ID 537

Hi,

One of my workstations on my SBS2003 network has just recently started
generating Event ID 537 errors to the servers security log. It logs the
error 3 times every 30 seconds, which means that in the typical working day
I have around 2000-3000 errors in my event log. I have searched for a
solution to this error, but it seems that it could be as a result of many
reasons. The mosty likely one seemed to be that the workstations time was
out of sync with the servers, but I have checked and even reset the time
sync with the server, to no avail.

Further detail of the error is as follows:

Logon Failure:
Reason: An error occurred during logon
User Name: Beverley
Domain: AGCACC
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -
Status code: 0xC00002EE
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -



If anyone has any advice for me, I would really appreciate it.


Thanks


Andrew


.

Relevant Pages

  • Re: Very Slow(60mins) XP logon
    ... The DNS on the servers is set to internal only, workstations get their dns through dhcp which also sets them up for internal dns. ... The slow logon happens with any AD account. ...
    (microsoft.public.win2000.networking)
  • Re: HELP, I cannot figure this one out.......
    ... Make sure that w32time is running on all the servers and that one of them ... > Logon Failure: ... > Logon Process: Kerberos ... > Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Keep getting login failure for user "inna" on multiple servers
    ... I often get people trying to gain entry to the various servers ... Logon Failure: ... Caller User Name: SERVER01$ ...
    (microsoft.public.windows.server.sbs)
  • Re: 540,576,538
    ... servers and I don't know what triggers it and why that user. ... I disable the local user and I get an failure to logon now. ... Event Type: Success Audit ... Caller User Name: - ...
    (microsoft.public.security)
  • Event ids 529 and 681
    ... I have a few workstations that occasionally generate a pair of event id's ... Servers members of SERVERS domain. ... Event Type: Failure Audit ... Logon Failure: ...
    (microsoft.public.win2000.security)