|
Posted by Neil Ruston on December 12, 2005, 4:10 am
Please log in for more thread options
Have a read here:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/monitor/logevnts.mspx
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/d8fc798c-1e77-4043-b59c-971b4961d85a.mspx
neil
"Spin" wrote:
> Experts,
>
> Running Windows Server 2003 SP1. This system is an internal DC (hosting no
> web sites, has no SQL server, etc...). It does run SUS and has Remote
> Desktop enabled. Anyway a couple times each day the Security event log
> generates the below Failure Audits. Does anyone have a clue as to how I
> should troubleshoot this? The User in the main Event ID area is User: NT
> AUTHORITY\SYSTEM and in the Description pane below the "User Name:" is
> usually blank. When it is not blank it is either my logon ID or the domain
> admins login ID. The Client Address is also always the admin workstation
> (which has no viruses) I primarily use.
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Account Logon
> Event ID: 673
> Date: 12/1/2005
> Time: 2:45:23 PM
> User: NT AUTHORITY\SYSTEM
> Computer: TERMINAL-SERVER
> Description:
>
> Service Ticket Request:
> User Name:
> User Domain:
> Service Name:
> Service ID: -
> Ticket Options: 0x2
> Ticket Encryption Type: -
> Client Address: 192.168.1.15
> Failure Code: 0x20
> Logon GUID: -
> Transited Services: -
>
> --
> Spin
>
>
>
| 
XML Sitemap