Re: 529 Logon Failures - 138 Events

In article <89BD8148-F2D1-4C9D-B2CD-0E33B89D41B1@xxxxxxxxxxxxx>, chuckie126
@discussions.microsoft.com says...

I had the same issue this morning. The Server Performance Report showed
exactly 138 Event 529.

Is there a way to tell if they were trying through RWW or OWA?

Not sure, but probably doesn't matter much. Unless you are using something
like RWW Guard (http://www.scorpionsoft.com/products/rww-guard/), the attack
mechanism is similar. This is why password policies are important.

-- Owen Williams [SBS MVP]
.

Relevant Pages

  • Remote Web Work Place EXTREMELY Slow
    ... Im having an issue with RWW. ... after I type in my credintuals, its takes anywhere from 1-2 min to ... just for me, but for every user in my network, no matter what PC i'm ...
    (microsoft.public.windows.server.sbs)
  • RE: RWW & OWA Problems
    ... RWW and OWA from Internet. ... Run CEICW on SBS ...
    (microsoft.public.windows.server.sbs)
  • RE: RWW, OWA, mobile device sync mystery
    ... the certificate problem will not cause RWW and OWA ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 w/ 2nd Exchange/OWA Server
    ... From your suggestion, the users would still use RWW and when clicking on the RWW OWA link, their requests would be internally redirected to the new Exchange OWA IIS. ... I understand that you move the OWA from SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: E-mail Only
    ... Certainly in SBS 2008, you do not. ... They'll have OWA rights without any local logon ... If you're talking about via RWW, then yes, that's correct. ... As for ADUC, in the user account properties, Account tab, Logon To, I click ...
    (microsoft.public.windows.server.sbs)
Loading