Sign in
 
HomeLibraryWikiLearnGalleryDownloadsSupportForumsBlogs
Resources for IT Professionals >
> 
> 
> 
Event ID: 529 - Advapi

Answered Event ID: 529 - Advapi

  • Monday, December 10, 2012 9:24 AM
     
     
    Sign In to Vote
    0

    I changed the Admin password on the Server I managed.  Changed it through the Change Password on the Crt-Alt-Del screen.

    Since then I have been getting the following error message in the event log, about 100 times per day every 30 minutes.  The only difference is that the source port is never the same.  I have restarted the Server several times, but makes no difference.

    I have banked out the User Name and Domain.

    I am running SBS2003 with SP2 and all updates applied.

    Event Type: Failure Audit
    Event Source: Security
    Event Category: Logon/Logoff 
    Event ID: 529
    Date: 10/12/2012
    Time: 09:11:49
    User: NT AUTHORITY\SYSTEM
    Computer: SERVER
    Description:
    Logon Failure:
    Reason: Unknown user name or bad password
    User Name: XXXXXXXX
    Domain: XXXXXXXX
    Logon Type: 3
    Logon Process: Advapi  
    Authentication Package: Negotiate
    Workstation Name: SERVER
    Caller User Name: SERVER$
    Caller Domain: BANCUMM
    Caller Logon ID: (0x0,0x3E7)
    Caller Process ID: 468
    Transited Services: -
    Source Network Address: 192.168.16.2
    Source Port: 49285

    Regards

    Trevor

                  
     

All Replies