Events 529 680 681 - Concerned about security breach

From: Ajay Prashar (aprashar@pmgscc.com)
Date: 04/11/03 

From: "Ajay Prashar" <aprashar@pmgscc.com>
Date: Thu, 10 Apr 2003 17:14:47 -0700

Hi,

I have a network largely comprised of XP Pro workstations in a single
domain. A laptop of someone very high up in the organization is logging the
event on every workstation on my network yet not on the domain controllers.
The laptop is running XP HOME edition and is obviously not a part of our
domain. The frequency of errors vary from 2 to 8 attempts on each computer
a day when the laptop is plugged in.

We have the most updated Anti-virus products installed; along with adaware
detection software and have even run Trojan detection on the laptop.
Nothing from any of these utilities stands out.

I'm just looking for advice. I will include the events below.

Sincerely,
Ajay Prashar

Logon Failure:
                Reason: Unknown user name or bad password
                User Name: Jim
                Domain: JIMSCOMPUTER
                Logon Type: 3
                Logon Process: NtLmSsp
                Authentication Package: NTLM
                Workstation Name: JIMSCOMPUTER

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

*************************************************************************
The logon to account: Jim
 by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 from workstation: JIMSCOMPUTER
 failed. The error code was: 3221225572

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

*************************************************************************
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 Logon account: Jim
 Source Workstation: JIMSCOMPUTER
 Error Code: 0xC0000064

Relevant Pages

  • Re: task bar feezes on logon for about 15 mins then comes good,
    ... laptop, unplug it from the network, walk across the office, ... unplug the desktop from the network, use the cable from the desktop to plug ... different when the second user is Amy as opposed to the second user being ... If we logon to the laptop, after about the 3rd time it's logged the task bar ...
    (microsoft.public.windowsxp.perform_maintain)
  • Need help with XP Home edition networkin workgroup
    ... I'm trying to set up a small home network with a workstation and a laptop, ... The problem is that I can access the "shared documents" folder on the laptop ...
    (microsoft.public.windowsxp.help_and_support)
  • Wireless networking problem with user accounts
    ... My home network involves a laptop and a PC workstation masquerading as ... Restricted accounts can open the software the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: sharing a usb printer
    ... Sure there is, logon to the desktop. ... folder, choose properties. ... Select the network printer option, then use browse to select your ... > I also have a wireless network setup and want my laptop to be able to ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Events 529 680 681 - Concerned about security breach
    ... A laptop of someone very high up in the organization is logging ... > event on every workstation on my network yet not on the domain ... > The logon to account: ... The error code was: 3221225572 ...
    (microsoft.public.win2000.security)