Re: Failure audit in security log

From: AiKay (iwazeer2@hotmail.com)
Date: 11/01/02 

From: "AiKay" <iwazeer2@hotmail.com>
Date: Fri, 1 Nov 2002 09:33:38 -0500

Eric,

Thanks for your answers. I already tried nbtstat and also checked my arp
cache but didnt find anything.

Imran
"Eric Fitzgerald [MS]" <ericf@online.microsoft.com> wrote in message
news:3dc18f3c$1@news.microsoft.com...
> One more note: to actually see the remote machine's IP address, you have
to
> issue the command:
> nbtstat -c
> after the nbtstat -a command.
>
> Eric
>
> "Eric Fitzgerald [MS]" <ericf@online.microsoft.com> wrote in message
> news:3dc18ef2$1@news.microsoft.com...
> > If the workstation is on the same subnet as you, or if it points to your
> > WINS environment, then the following command will return the machine's
IP
> > address:
> >
> > nbtstat -a workstationname
> >
> > If the machine is not resolvable by WINS or broadcast, then no, you
can't
> > get any more information about it after the fact.
> >
> > Eric
> >
> >
> > "AiKay" <iwazeer2@hotmail.com> wrote in message
> > news:#F#gxFPgCHA.2256@tkmsftngp12...
> > > I saw some Failure audits in my security log with Event Code Ids 529
and
> > > 681. The log (in event viewer) only shows a workstation name in the
> > > Workgroup domain. Is there anyway I can find out more information
about
> > that
> > > workstation or try to gather more information that will be useful for
my
> > > network security person?
> > >
> > > Aikay
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: WINS resolution
    ... I run the command nbtstat -N -S -c and following is the output that I ... Microsoft MVP - Directory Services ... Instead of the website you're using, try using OEx (Outlook Express ...
    (microsoft.public.windows.server.networking)
  • net view shows "no entries in list" via name but works via IP
    ... netbios connectivity dies and has a very hard time being reactivated. ... Okay, that's weird, I know there are shares. ... The command completed successfully. ... Both ping and nbtstat show that name ...
    (microsoft.public.windowsxp.network_web)
  • nbtstat issue
    ... When an admin uses nbtstat -A, ... command, they get "Failed to access NetBT driver - NetBT ... in the new window. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Failure audit in security log
    ... after the nbtstat -a command. ... >> I saw some Failure audits in my security log with Event Code Ids 529 and ... >> workstation or try to gather more information that will be useful for my ...
    (microsoft.public.win2000.security)
  • Re: Workstation logon error.
    ... > | The workstations are on the same lan segment ... > | I have not tried that nbtstat command, ... > NBTSTAT /? ... > communicate using NetBIOS. ...
    (microsoft.public.win2000.general)