Login failure

Question

Login failure

RGP

SSCarpal Tunnel

Points: 4381
More actions
October 4, 2008 at 11:32 pm

#126631

Hi,
In SQL Server error logs I am getting this message,
Date05/10/2008 8:18:39 AM
LogSQL Server (Current - 05/10/2008 8:18:00 AM)
SourceLogon
Message
Login failed for user 'DOM\ITD-RINIA$'. [CLIENT: 10.0.12.83]
---------------------------------------------------------------------
---The login name that is given 'DOM\ITD-RINIA$' is from my local machine(but this id 'DOM\ITD-RINIA$', I dont see it any where in my machine).
This error from error log is from a terminal server, where SSIS packages are deployed. I get this message every 5 mins interval.
I tried uninstalling SQL Server 2005 from my PC and re-installing, but still getting the same message.
Any suggestions please...

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 1

Do you have any applications installed that would try to talk to SQL Server? Especially any apps running as Network Service? A typical culprit is a web application, like SQL Server Reporting Services (but not necessarily), which runs under IIS.

K. Brian Kelley
@kbriankelley

RGP SSCarpal Tunnel Points: 4381 More actions · Answer 2

Thanks, can you please tell me where can I check for these services? and how to stop them.

Vijai K Grasshopper Points: 15 More actions · Answer 3

You can use your SQL Server Configuration Manager to the check, whether these services are running or not?

RGP SSCarpal Tunnel Points: 4381 More actions · Answer 4

Thanks, all the services are runnning and using local system account as Log on, what else to check please..

HanShi SSC-Dedicated Points: 33508 More actions · Answer 5

If the login is originated from your computer and the error is captured every 5 minutes, it could be a scheduled task.

Else I suggest to look with task-manager on your local machine for running applications and processes. If you can't figure it out, killing suspected processes until you find the errors are gone.

** Don't mistake the ‘stupidity of the crowd’ for the ‘wisdom of the group’! **

RGP SSCarpal Tunnel Points: 4381 More actions · Answer 6

HanShi (10/6/2008)
If the login is originated from your computer and the error is captured every 5 minutes, it could be a scheduled task.
Else I suggest to look with task-manager on your local machine for running applications and processes. If you can't figure it out, killing suspected processes until you find the errors are gone.

thanks. I dont see any scheduled task, from windows.

i have also uninstalled sql server 2005 from my machine.

i checked for the task, in task manager in windows,

still getting the same logon failure:

SourceLogon

Message

Error: 18456, Severity: 14, State: 11.

any suggestions...

HanShi SSC-Dedicated Points: 33508 More actions · Answer 7

After closing all applications, you have to look for running processes. It sure looks like you have an application running on the background (or hidden). If the failing logins also occur after a reboot, look at processes/applications that automatically start.

** Don't mistake the ‘stupidity of the crowd’ for the ‘wisdom of the group’! **