Have not spoken to Joes. We get this error for multiple people. Some on
laptops, some working home, some at the office. There is no common thread
that I have been able to discover. We use NT 4 w/s and use the built in
screensaver.
Michael Semiglia
-----Original Message-----
From: Hunter, Lori [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 22, 2001 4:23 PM
To: Exchange Discussions
Subject: RE: 535 errors in security log
Sounds like a process rather than a user is causing that. For example, I
run a screensaver package that requires you to enter your LAN password
rather than some silly one-character windows password, and if the spacebar
(or any repeating key) on the keyboard is stuck down or depressed (like by a
chair arm) we will get thousands of these logon failures until the service
Dr. Watsons.
Have you spoken to JoeS?
Lori Hunter
LAN Administrator
Citi Commerce Solutions
(847) 597-3118
"Out think, Out smart, Out medicate" - Steinvivor
-----Original Message-----
From: Semiglia, Michael [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 22, 2001 2:52 PM
To: Exchange Discussions
Subject: 535 errors in security log
NT SP6a ExchSP4 - audit turned on for log on failures and successes -
mandated by security guidelines. Exchange is in a resource domain and user
accounts are in the Account domain. Resource domain trusts account domain
with a one way trust.
Over the last couple of weeks I am getting hundreds of 535 errors every
MINUTE in the NT Security event logs on the resource domain controllers that
house the exchange system. This has the effect of eating up space on the
server due to the fact that we have to keep all of out logs around for a
while. The server guys swear that it is an Outlook/Exchange issue since they
are not seeing the errors on the account domain controllers log files. Poked
around MS KB and also Google, however was not able to find anything. Does
anyone have any ideas?
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 535
Date: 8/22/2001
Time: 12:00:02 PM
User: NT AUTHORITY\SYSTEM
Computer: server1 <---This is an exchange server in resource domain
Description:
Logon Failure:
Reason: The specified account's password has expired
User Name: joes <---User in account domain
Domain: fire <--- Resource domain
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: PTLL78HB074
Thank You!
Michael Semiglia
Exchange E-mail Engineering
*207 575-1094
*[EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
