Re: Logon type 3 - ID 529

Hi Mehdis..

Do the workstations have anything in their app/security/system logs
corresponding to the same time as the server log..?

As they are vista, has SP1 been applied recently ? Not that I am aware of
any issues though.

Has anything else been applied / configured to those pcs recently


"Mehdis" <Mehdis@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8C8DDFA6-BF1D-4CE3-BB47-5262FD20ED1A@xxxxxxxxxxxxxxxx
Hi all,

Late this afternoon I received around 80 failed security login alerts from
3
computers in the office (these 3 machines are all vista). It's the first
time
this seems to have happened. One of the users wasn't even using their PC
when
the alert appeared.

Details are:

Event ID: 529
Logon Failure:
Reason: Uknown user name or bad password
Domain: companydomain
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: VISTAMACHINE

All other fields are blank including 'User Name'

I've read logon type 3 can be caused due to access of shared
folders/printers but doesnt explain why its suddenly occuring now.

Any ideas to why this occuring would be much appreciated!



.

Relevant Pages

  • Re: Authentication Issues with Vista Clients
    ... Do you have the ISA client installed and the Vista ripcurl installed on the server? ... He is able to browse the Sharepoint site without having to input a password, but it keeps prompting for it whenever he tries to open/edit any documents through it. ... Just now, as I've been typing this message, I've realized that the Sharepoint issue is happening on my domain administrator account, too. ... It seems to happen with his and my account on all three Vista workstations and not the XP workstation. ...
    (microsoft.public.windows.server.sbs)
  • IE7 proxy not passing user credentials to ISA04
    ... We are running SBS03 R2 Premium and the workstations are a mix of Vista business and XP Pro. ... If I modify the SBS internet Access Rule and remove 'SBS internet users' and change it to 'All Users' it works fine. ...
    (microsoft.public.windows.server.sbs)
  • Re: Vista and Remote Access via RWW
    ... In addition to the "Users" group add the users to the "Remote Desktop Users" group as well (on Vista). ... I am starting to have requests to install Vista workstations in several ... Several of the workstations have the user in the 'User' local group instead ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to browse shared folders on DC
    ... surprising thing is that all the workstations running Vista is not ... affected and still able to access shared folders without any problems ... so, please post an unedited ipconfig /all from the DC, an XP and a Vista ... Infinite Diversities in Infinite Combinations ...
    (microsoft.public.windows.server.active_directory)
  • Vista GPO for Automatic Updates
    ... We have about 110 Vista worktations rolled out throughout our company. ... Basically I do not want users workstations ... Policy Setting ... Remove links and access to Windows Update Enabled ...
    (microsoft.public.win2000.group_policy)