Remove From My Forums

repeated audit failure of computer account trying to connect to itself

Question
0

Sign in to vote
hi,

running 2008 R2 SP1 file server.

I'm seeing repeated event id 4625 audit failures in the security log. The computer account is trying to remotely connect to itself.

account name is the computername$

and the workstation name is the same file server computer. I'm seeing this every second.

No process id is provided:

Where can I start with this one? I cannot say when it started or what changed before this happened.

Thanks,

rudif

Failure Information:

Failure Reason: An Error occured during Logon.

Status: 0xc000006d

Sub Status: 0x0

Process Information:

Caller Process ID: 0x0

Caller Process Name: -
- Edited by rudi f Tuesday, August 14, 2012 4:58 PM
Tuesday, August 14, 2012 4:57 PM

Answers

0

Sign in to vote
..and in what way is your problem related to Exchange?

I guess not, so I recommed that you re-post your question in a forum for Windows Server.
See: http://social.technet.microsoft.com/Forums/en-US/category/windowsserver

Martina Miskovic
- Marked as answer by rudi f Tuesday, August 14, 2012 6:11 PM
Tuesday, August 14, 2012 5:16 PM

All replies

0

Sign in to vote
..and in what way is your problem related to Exchange?

I guess not, so I recommed that you re-post your question in a forum for Windows Server.
See: http://social.technet.microsoft.com/Forums/en-US/category/windowsserver

Martina Miskovic
- Marked as answer by rudi f Tuesday, August 14, 2012 6:11 PM
Tuesday, August 14, 2012 5:16 PM
0

Sign in to vote
it's not. I thougth I was in the server admin group.

thanks for the link.

rf_admin
- Edited by rudi f Tuesday, August 14, 2012 6:11 PM
Tuesday, August 14, 2012 6:10 PM