|
Event ID 529 - Logon Failure 1/2
Symptom: There is similar
Event ID 529 logged in the Event Viewer.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: Date
Time: Time
User: NT AUTHORITY\SYSTEM
Computer: ComputerName
Description:
Logon Failure:
Reason: An error occurred during logon
User Name: UserName
Domain: DomainName
Logon Type: 3
Logon Process: Authz
: Kerberos
Workstation Name: WorkstationName
Status code: 0xC000018B
Substatus code: 0x0
Caller User Name: UserName$
Caller Domain: DomainName
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 936
Transited Services:
Source Network Address: IP Address
Source Port: PortNumber
Or
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: date
Time: time
User: NT AUTHORITY\SYSTEM
Computer: domain controller computer name
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: user name
Domain: client computer name
Logon Type: 3
Logon Process: KSecDD
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: client computer name
Or
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: date
Time: time
User: NT AUTHORITY\SYSTEM
Computer: domain controller computer name
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: IUSR_SERVER
Logon Type: 8
Logon Process: IIS
Authentication Package: Negotiate
Workstation Name: ServerName
Caller User Name: UserName
Caller Domain: DomainName
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 5786
Transited Services:
Source Network Address: IP Address
Source Port: PortNumber
Event ID 529 - Logon Failure 2/2
Troubleshooting and Cases
Related Topics
Event ID 539 -
Logon Failure: Account locked out
Windows
Logon
Types
|
