Re: 675 and 672 error in security event log !
From: Denis (devnull_at_paco.net)
Date: 07/10/04
- Next message: news: "Phanthom test message"
- Previous message: George Hester: "Re: 675 and 672 error in security event log !"
- In reply to: George Hester: "Re: 675 and 672 error in security event log !"
- Next in thread: Ian: "675 and 672 error in security event log !"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 10 Jul 2004 16:26:38 +0300
Hi George Hester!
Thanks for the link, but this site to me it is familiar for a long time and
not one of decisions does not correspond mine to a problem.
"George Hester" <hesterloli@hotmail.com> ???????/???????? ? ????????
?????????: news:%23ojuA6nZEHA.2840@TK2MSFTNGP11.phx.gbl...
http://www.eventid.net/display.asp?eventid=675&eventno=62&source=Security&phase=1
-- George Hester __________________________________ "Denis" <devnull@paco.net> wrote in message news:ccoi8u$1nv9$1@news.kiev.sovam.com... > Hi All. > > I already asked this question, but the answer and have not been given.: ( > Rather often event in securiti log 675 and 672, than can be called? > > Example of events. > > ------------------------------------------------------ > Event Type: Failure Audit > Event Source: Security > Event Category: Account Logon > Event ID: 675 > Date: 10.07.2004 > Time: 8:34:39 > User: NT AUTHORITY\SYSTEM > Computer: DC > Description: > Pre-authentication failed: > User Name: User1 > User ID: DOMAIN\User1 > Service Name: krbtgt/DAMAIN > Pre-Authentication Type: 0x2 > Failure Code: 0x18 > Client Address: 10.10.10.2 > > 10.10.10.2 - Terminal Server. > > ------------------------------------------------------ > > Event Type: Failure Audit > Event Source: Security > Event Category: Account Logon > Event ID: 672 > Date: 09.07.2004 > Time: 7:00:10 > User: NT AUTHORITY\SYSTEM > Computer: DC > Description: > Authentication Ticket Request: > User Name: User2 > Supplied Realm Name: DOMAIN.LOCAL > User ID: - > Service Name: krbtgt/DOMAIN.LOCAL > Service ID: - > Ticket Options: 0x40810010 > Result Code: 0x17 > Ticket Encryption Type: - > Pre-Authentication Type: - > Client Address: 10.10.10.152 > Certificate Issuer Name: > Certificate Serial Number: > Certificate Thumbprint: > > ------------------------------------------------------ > > Thanks for any guesses. > > > > > > >
- Next message: news: "Phanthom test message"
- Previous message: George Hester: "Re: 675 and 672 error in security event log !"
- In reply to: George Hester: "Re: 675 and 672 error in security event log !"
- Next in thread: Ian: "675 and 672 error in security event log !"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|