Failure audit in even logs

  • Hey,

    I'm having a problem where my machine name shows up in the logs with the following messages.

    Event Type:Failure Audit

    Event Source:Security

    Event Category:Logon/Logoff

    Event ID:529

    Date:5/31/2005

    Time:3:23:22 PM

    User:NT AUTHORITY\SYSTEM

    Computer:BALTCAP54

    Description:

    Logon Failure:

    Reason:Unknown user name or bad password

    User Name:arasoulo

    Domain:CORP

    Logon Type:3

    Logon Process:NtLmSsp

    Authentication Package:NTLM

    Workstation Name:arasoulo_8915

    Event Type:Failure Audit

    Event Source:Security

    Event Category:Account Logon

    Event ID:681

    Date:5/31/2005

    Time:3:23:22 PM

    User:NT AUTHORITY\SYSTEM

    Computer:BALTCAP54

    Description:

    The logon to account: arasoulo

    by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

    from workstation: arasoulo_8915

    failed. The error code was: 3221225572

    Event Type:Failure Audit

    Event Source:Security

    Event Category:Logon/Logoff

    Event ID:529

    Date:5/31/2005

    Time:3:23:18 PM

    User:NT AUTHORITY\SYSTEM

    Computer:BALTCAP54

    Description:

    Logon Failure:

    Reason:Unknown user name or bad password

    User Name:arasoulo_8915

    Domain:arasoulo_8915

    Logon Type:3

    Logon Process:NtLmSsp

    Authentication Package:NTLM

    Workstation Name:arasoulo_8915

  • Hello,

    For whatever reason, SQL EM passes your domain credentials to the machine (i've gotten many calls from our Security team about this very issue).

    Create a user account on the machine that exactly matches your domain account.  This will resolve the problem.

    Good luck.

    -C

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply