locked
Server Audit issue RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    My server has a failed audit every 15 seconds please see error report below.     Notice workstation name Windows7... This is what confuses me as this is Server 2012R2

    - EventData
    SubjectUserSid S-1-0-0
    SubjectUserName -
    SubjectDomainName -
    SubjectLogonId 0x0
    TargetUserSid S-1-0-0
    TargetUserName Administrator
    TargetDomainName
    Status 0xc000006d
    FailureReason %%2313
    SubStatus 0xc0000064
    LogonType 3
    LogonProcessName NtLmSsp
    AuthenticationPackageName NTLM
    WorkstationName Windows7
    TransmittedServices -
    LmPackageName -
    KeyLength 0
    ProcessId 0x0
    ProcessName -
    IpAddress -
    IpPort

    -
    Wednesday, June 1, 2016 5:50 PM

Answers