locked
repeated audit failure of computer account trying to connect to itself RRS feed

  • Question

  • hi,

    running 2008 R2 SP1 file server.

    I'm seeing repeated event id 4625 audit failures in the security log.  The computer account is trying to remotely connect to itself.

    account name  is the computername$

    and the workstation name is the same file server computer.  I'm seeing this every second.

    No process id is provided:

    Where can I start with this one?  I cannot say when it started or what changed before this happened.

    Thanks,

    rudif

    Failure Information:

    Failure Reason: An Error occured during Logon.

    Status: 0xc000006d

    Sub Status: 0x0

    Process Information:

    Caller Process ID: 0x0

    Caller Process Name: -


    • Edited by rudi f Tuesday, August 14, 2012 4:58 PM
    Tuesday, August 14, 2012 4:57 PM

Answers

All replies