Account Lockout msg
From: Guru Cumarasamy (gcumarasamy@changepoint.com)
Date: 11/25/02
- Next message: John Smith: "APPSEC"
- Previous message: bernie: "registry/Explorer/IE capture of NTFS junction targets"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Guru Cumarasamy" <gcumarasamy@changepoint.com> Date: Mon, 25 Nov 2002 12:19:43 -0800
After changeing the password for the domain admin account,
I am getting the following error message in the Exchange
server Security log. I am not running any services with
this account. This account was used to upgrade the
Exchange 5.5 to Exchange 2000. The sever is Echange 2000
with Service pack 2. Can someone tell me how I can trace
this down to see what process is using this account.
(I have changed the actual user name and the server name
from the below log for security reason)
-----------------------------------------------------------
Date: 11/25/2002 Source: Security
Time: 11:35 Category: Logon/Logoff
Type: Failure Event ID: 529
User: NT AUTHORITY\SYSTEM
Computer: MAILSERVER
Logon Failure:
Reason: Unknown user name or bad password
User Name: Myaccount
Domain: CHANGEPOINT_HO
Logon Type: 7
Logon Process: Advapi
Authentication Package:
MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: MAILSERVER
Thanks for you help in advance
.
- Next message: John Smith: "APPSEC"
- Previous message: bernie: "registry/Explorer/IE capture of NTFS junction targets"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
