Re: Events 529 680 681 - Concerned about security breach

From: Ajay Prashar (aprashar@pmgscc.com)
Date: 04/15/03 

From: "Ajay Prashar" <aprashar@pmgscc.com>
Date: Tue, 15 Apr 2003 14:14:59 -0700

I have not received any responses regarding this post. Please let me know
if I am missing important information. I sure could use some input.

Thanks,

-Ajay

"Ajay Prashar" <aprashar@pmgscc.com> wrote in message
news:ubued97$CHA.2368@TK2MSFTNGP11.phx.gbl...
> Hi,
>
> I have a network largely comprised of XP Pro workstations in a single
> domain. A laptop of someone very high up in the organization is logging
the
> event on every workstation on my network yet not on the domain
controllers.
> The laptop is running XP HOME edition and is obviously not a part of our
> domain. The frequency of errors vary from 2 to 8 attempts on each
computer
> a day when the laptop is plugged in.
>
> We have the most updated Anti-virus products installed; along with adaware
> detection software and have even run Trojan detection on the laptop.
> Nothing from any of these utilities stands out.
>
> I'm just looking for advice. I will include the events below.
>
> Sincerely,
> Ajay Prashar
>
>
> Logon Failure:
> Reason: Unknown user name or bad
password
> User Name: Jim
> Domain: JIMSCOMPUTER
> Logon Type: 3
> Logon Process: NtLmSsp
> Authentication Package: NTLM
> Workstation Name: JIMSCOMPUTER
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> *************************************************************************
> The logon to account: Jim
> by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> from workstation: JIMSCOMPUTER
> failed. The error code was: 3221225572
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> *************************************************************************
> Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> Logon account: Jim
> Source Workstation: JIMSCOMPUTER
> Error Code: 0xC0000064
>
>

Relevant Pages

  • Re: Unable to share files over crossover cable anymore
    ... I did a search on the error code I got using your suggestion of the use of ... The error code was 1311. ... The key was to click on logon as different user. ... I've run into a problem with file sharing between my laptop and my ...
    (microsoft.public.windowsxp.general)
  • Events 529 680 681 - Concerned about security breach
    ... event on every workstation on my network yet not on the domain controllers. ... The laptop is running XP HOME edition and is obviously not a part of our ... Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 ...
    (microsoft.public.win2000.security)
  • Re: pls help
    ... The logon to account: ibm ... from workstation: ASYLUM ... The error code was: 3221225572 ...
    (microsoft.public.win2000.security)
  • Re: Unable to access local workstations from SBS 2003
    ... I'm able to do just about anything from the laptop or any other workstation ... can't copy/past from the server or do a \\Local01 ... Logon Failure: User has not been granted the requested ...
    (microsoft.public.windows.server.sbs)
  • Event 529 vs 681
    ... The logon to account: ... from workstation: xxxxxxSMS3 ... The error code was: 3221225572 ...
    (microsoft.public.win2000.security)