Re: Event ID:677 source:security. What does this mean?

From: Bill Sanderson (bill_NoSpamSanderson@msn.com)
Date: 09/07/02


From: "Bill Sanderson" <bill_NoSpamSanderson@msn.com>
Date: Fri, 6 Sep 2002 20:20:11 -0400


www.eventid.net can be a useful source for these issues:

http://www.eventid.net/display.asp?eventid=677&source

Tony wrote:
> Event Type: Failure Audit
> Event Source: Security
> Dear Mr/Ms,
>
> I have a problem interpreting this event logging.
> I would like to know if how I think of the interpretation
> is correct from what(ID:677) concerning the security
> source in event viewer means. On the line containing
> Service Name I only changed the IP address for security
> reasons. But it is how it's being displayed.
> Could you please tell me what especially the Service Name
> is stands for? Does this mean that a a service (or host)
> is trying to access client address (111.111.111.2) from
> unknown host (HOST) via machine with IP:111.111.111.1?
>
> (Copied from event properties)
> Event Category: Account Logon
> Event ID: 677
> Date: 8/31/2002
> Time: 3:04:22 PM
> User: NT AUTHORITY\SYSTEM
> Computer: SRVNAME
> Description:
> Service Ticket Request Failed:
> User Name: ACCOUNT$
> User Domain: XXXXX.COM
> Service Name: HOST/111.111.111.1
> Ticket Options: 0x40810010
> Failure Code: 0x7
> Client Address: 111.111.111.2
>
> Thanks in advance for your cooperation.
>
> Kind regards,
>
> Tony



Relevant Pages

  • [EXPL] WebDAV Exploit Code Released
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... vulnerability in WebDAV allows a remote attacker to cause the server to ... my $host; # Host being probed. ... }; # end host subroutine. ...
    (Securiteam)
  • Re: McAfee and Comcast
    ... The reason I wanted to check it out is both their anti-virus and firewall include HIPS (host intrusion protection system) which would integrate well together. ... I'm just using the free versions so not all the security features are there. ...
    (microsoft.public.windowsxp.basics)
  • Re: McAfee and Comcast
    ... I wanted to check it out is both their anti-virus and firewall include ... HIPS (host intrusion protection system) which would integrate well ... versions so not all the security features are there. ...
    (microsoft.public.windowsxp.basics)
  • Re: McAfee and Comcast
    ... I wanted to check it out is both their anti-virus and firewall include ... HIPS (host intrusion protection system) which would integrate well ... versions so not all the security features are there. ...
    (microsoft.public.windowsxp.basics)
  • Re: Your opinion matters
    ... If all you want is some overall rating of your document, well, it is too simplistic and wanders off on topics that have nothing to do with securing the *host*. ... You talk about security of e-mail but that doesn't secure your host. ... Only one account gets automatically created during the setup: ... The other accounts are those created by the admin *user* and AFTER the install, so it up to the admin to decide who gets admin rights, not the setup program that isn't running anymore. ...
    (microsoft.public.windowsxp.general)

Quantcast