Administrator Event 529 on SBS2003 SP1

Tech-Archive recommends: Speed Up your PC by fixing your registry

I am recieving the following on an SBS2003 SP1

Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: HORIZONCV
Logon Type: 8
Logon Process: IIS
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SERVER
Caller User Name: SERVER$
Caller Domain: HORIZONCV
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1920
Transited Services: -
Source Network Address: -
Source Port: -

I have referenced this article:

http://support.microsoft.com/default.aspx/kb/811082

However, that the user in the log is NT AUTHORITY/SYSTEM, not Administrator
as mentioned above. The Administrator has been renamed since the original
installation over 1 yr. ago. Also, NO services use and Administrative
account, let alone Administrator.

When I check the verions of WinLogon.exe it states that if it is older than
5.2.3790.367 the you have the "fixed" version. My file is at verions
5.2.3790.3959.

I want to ensure nothing malicious is taking place since something is trying
to access the Administrator account, albeit disabled...as I cannot find an
exact problem here.

TIA,

Steve


.

Relevant Pages

  • Errors After Changing Administrator Password
    ... We had to change our domain administrator password, ... DCOM got error "Logon failure: unknown user name or bad password. ... Caller User Name: BRADFORDDC01$ ... Once in DCOM Config, I looked for the application ID referenced in the ...
    (microsoft.public.windows.server.sbs)
  • Re: Security issue
    ... How to configure remote access client account lockout in Windows Server 2003 ... 10 time a username and password (Mostly if it's administrator) then the ... Logon Failure: ... Caller User Name: PRANA$ ...
    (microsoft.public.windows.server.sbs)
  • Re: Scheduled Tasks - Strange Permissions Issue
    ... I'm trying to figure out what other permissions the Administrator has that are not obvious. ... They appear to run and don't issue any errors in the scheduled tasks log, yet they seem to be having permissions problems. ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.security)
  • Re: Help needed with Critical Errors in Security Log
    ... Logon Failure: Account locked out ... How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com ... Caller User Name: administrator ... Caller Domain: BARSANADHAM ...
    (microsoft.public.windows.server.sbs)
  • Re: Scheduled Tasks - Strange Permissions Issue
    ... figure out what other permissions the Administrator has that are not ... got several scheduled tasks that are exhibiting some strange behavior. ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.security)