Re: Kerberos Errors constantly showing in Server Reports

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



yes.

--
Regards,
Vikram

------------------------------

"JoeF" <JoeF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:1BB236E1-ABFD-47DD-8C87-4EEC6D96E479@xxxxxxxxxxxxxxxx
There is no ISA server installed.

The client was only 3 minutes behind the server clock however; "Adjust for
Daylight Savings" was not checked on the client. I put a check in this field
and the clock adjusted itself ahead 1 hour. I then manually set the clock
back one hour and applied the changes.

Could this be the solution?
Thanks.

-JoeF

"Vikramjit Singh [MS]" wrote:

What is the time difference between the client and the server?
Should nto be more than 5 minutes.

Also do you have ISA installed?


--
Regards,
Vikram

------------------------------

"JoeF" <JoeF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:45977DB3-D37E-4853-A573-5F83082AD6FA@xxxxxxxxxxxxxxxx
>I keep getting Critical errors in the Security Log appearing daily on >the
> server performance report.
> It comes from the same workstation however; I have no idea what is > causing
> it or how to hunt it down. It also appears that the SOURCE port changes
> daily
> as well.
> Please assist. Thanks.
>
> -JoeF
> =====================================================
> Source Event ID Last Occurrence Total Occurrences
> Security 537 4/3/2007 5:03 AM 25 *
>
> Logon Failure:
> Reason: An error occurred during logon
> User Name:
> Domain:
> Logon Type: 3
> Logon Process: Kerberos
> Authentication Package: Kerberos
> Workstation Name: -
> Status code: 0xC000006D
> Substatus code: 0xC0000133
> Caller User Name: -
> Caller Domain: -
> Caller Logon ID: -
> Caller Process ID: -
> Transited Services: -
> Source Network Address: 192.168.xxx.xxx
> Source Port: 2194
>
>


.



Relevant Pages

  • Re: Event ID 529 Question
    ... Logon Failure: ... Caller User Name: SERVER01$ ... There is no "Mickey" user on our network, so it worries me that we have a hacker trying to get in using brute force logins as this occurred 45 times. ... Usually when you get this you see a source port and source IP Address, ...
    (microsoft.public.windows.server.sbs)
  • Re: Another Event 529
    ... I am loging hundreds of NT AUTHORITY\SYSTEM Logon failures from my ... All workstation seem to be getting triggering ... same event with different Source Port #'s. ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Another Event 529
    ... I am loging hundreds of NT AUTHORITY\SYSTEM Logon failures from my ... All workstation seem to be getting triggering the ... same event with different Source Port #'s. ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Another Event 529
    ... I am loging hundreds of NT AUTHORITY\SYSTEM Logon failures from my ... All workstation seem to be getting triggering ... same event with different Source Port #'s. ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Another Event 529
    ... I am loging hundreds of NT AUTHORITY\SYSTEM Logon failures from my ... All workstation seem to be getting triggering ... same event with different Source Port #'s. ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)