Hi,

Try the following link for more info:
http://www.eventid.net/display.asp?eventid=675&eventno=62&source=Security&ph
ase=1

Regards,
Jorge

-----Original Message-----
From: [EMAIL PROTECTED]
To: '[EMAIL PROTECTED]'
Sent: 26-10-2004 23:35
Subject: [ActiveDir] Event ID:675

I have a W2K DC that is giving me an error in the Security Log every
minute, this error is a failure Audit on the Domain Admin account, I
have no idea where this is coming from!
This is a domain controller is running all the service packs and
patches, it also has Exchange server 5.5 with service pack 4.
Our domain is composed of two DC's and has one child domain with one DC
that we use for testing purposes.
Any help will be appreciated.
 
See error details:
 
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon 
Event ID: 675
Date:  10/26/2004
Time:  3:47:56 PM
User:  NT AUTHORITY\SYSTEM
Computer: <machine-name>
Description:
Pre-authentication failed:
  User Name:  <domain-admin>
  User ID:  <DOMAIN\domain-admin>
  Service Name:  krbtgt/DOMAIN.COM
  Pre-Authentication Type: 0x2
  Failure Code:  0x18
  Client Address:  127.0.0.1
 

For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp>
http://go.microsoft.com/fwlink/events.asp.
 
Thanks,
Art


-- 
---------------------------------------------------------------------- 
FutureSoft, Inc. 
12012 Wickchester Lane, Suite 600 
Houston, TX 77079 
If you no longer want to receive commercial e-mail correspondence 
from FutureSoft, you may remove your address from our records 
by visiting www.futuresoft.com/emailremoval.asp
<http://www.futuresoft.com/emailremoval.asp>  
---------------------------------------------------------------------- 


This e-mail and any attachment is for authorised use by the intended recipient(s) 
only. It may contain proprietary material, confidential information and/or be subject 
to legal privilege. It should not be copied, disclosed to, retained or used by, any 
other party. If you are not an intended recipient then please promptly delete this 
e-mail and any attachment and all copies and inform the sender. Thank you.
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to