Re: Event ID:677 source:security. What does this mean?
From: Bill Sanderson (bill_NoSpamSanderson@msn.com)
Date: 09/07/02
- Next message: Bill Sanderson: "Re: 128 BIT ENCRYPTION"
- Previous message: Dan L: "Re: Computer Hacker"
- In reply to: Tony: "Event ID:677 source:security. What does this mean?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Bill Sanderson" <bill_NoSpamSanderson@msn.com> Date: Fri, 6 Sep 2002 20:20:11 -0400
www.eventid.net can be a useful source for these issues:
http://www.eventid.net/display.asp?eventid=677&source
Tony wrote:
> Event Type: Failure Audit
> Event Source: Security
> Dear Mr/Ms,
>
> I have a problem interpreting this event logging.
> I would like to know if how I think of the interpretation
> is correct from what(ID:677) concerning the security
> source in event viewer means. On the line containing
> Service Name I only changed the IP address for security
> reasons. But it is how it's being displayed.
> Could you please tell me what especially the Service Name
> is stands for? Does this mean that a a service (or host)
> is trying to access client address (111.111.111.2) from
> unknown host (HOST) via machine with IP:111.111.111.1?
>
> (Copied from event properties)
> Event Category: Account Logon
> Event ID: 677
> Date: 8/31/2002
> Time: 3:04:22 PM
> User: NT AUTHORITY\SYSTEM
> Computer: SRVNAME
> Description:
> Service Ticket Request Failed:
> User Name: ACCOUNT$
> User Domain: XXXXX.COM
> Service Name: HOST/111.111.111.1
> Ticket Options: 0x40810010
> Failure Code: 0x7
> Client Address: 111.111.111.2
>
> Thanks in advance for your cooperation.
>
> Kind regards,
>
> Tony
- Next message: Bill Sanderson: "Re: 128 BIT ENCRYPTION"
- Previous message: Dan L: "Re: Computer Hacker"
- In reply to: Tony: "Event ID:677 source:security. What does this mean?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|