Security Log Event ID 537

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I'm starting to see the following error a couple times a week on my SBS 2003
Prem. Server:

Critical Errors in Security Log

Event ID 537

Logon Failure:
Reason: An error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Ðù?^dù
Authentication Package: NTLM
Workstation Name:
Status code: 0x80090308
Substatus code: 0x0
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -

What I like is the following: Logon Process: Ðù?^dù , what is:
Ðù?^dù ?

Any ideas on what is going on here?

Thanks, MikeMc



.

Relevant Pages

  • Re: Bad login alerts
    ... RWW doesn't give source network address from external... ... Logon Failure: ... Caller User Name: - ... Workstation Name: SERVER ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Log Failure Audit
    ... Whenever an invalid logon occurs a "Failure Audit" event is written to the ... but the "Source Network Address" entry is always blank. ... Caller User Name: MyServer$ ...
    (microsoft.public.security)
  • Re: KDC Event ID 7 and Wins startup errors.
    ... Event Type: Information ... Event Source: USER32 ... Logon Failure: ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)
  • Re: KDC Event ID 7 and Wins startup errors.
    ... Scheduled reboot was done to ensure that no services/tasks are failing ... Event Type: Information ... Logon Failure: ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)
  • Re: Logon 529 Errors
    ... These are almost surely SMTP logon attempts, ... Caller User Name: DELLSERVER$ ... Source Network Address: - ...
    (microsoft.public.windows.server.sbs)