Re: 677 events

From: Romain Niccoli [MSFT] (romain_at_online.microsoft.com)
Date: 04/30/03 

Date: Tue, 29 Apr 2003 20:23:08 -0700

Have you installed windows 2000 SP3 on this machine? These
events were disabled by default in SP3. Check out
http://support.microsoft.com/default.aspx?scid=kb;en-
us;302879

(They can be re-enabled by setting the registry key
HKLM\CurrentControlSet\Services\Kdc\Parameters\AuditSpn to
1)

Romain.

This posting is provided "AS IS" with no warranties, and
confers no rights. Please do not send email directly to
this alias. This alias is for newsgroup purposes only.

>-----Original Message-----
>On Tue, 29 Apr 2003 09:06:05 +0700, Peter K.
<pmkdatabase@yahoo.ca>
>wrote in microsoft.public.win2000.security:
>
>>Any ideas what is causing these in the middle of the
night in an empty
>>office?
>>
>>Thanks,
>>
>>Peter Kaufman MCP
>>
>>Event Type: Failure Audit
>>Event Source: Security
>>Event Category: Account Logon
>>Event ID: 677
>>Date: 4/29/2003
>>Time: 4:30:28 AM
>>User: NT AUTHORITY\SYSTEM
>>Computer: PMCI-01
>>Description:
>>Service Ticket Request Failed:
>> User Name: ACCOUNTING2$
>> User Domain: JOMTIEN.PMCI.NET
>> Service Name: krbtgt/JOM.PMCI.NET
>> Ticket Options: 0x2
>> Failure Code: 0x20
>> Client Address: 192.168.100.206
>
>Kerberos tickets expire. Apparently, this is normal.
Switch off
>auditing Account Logon Failures. This seemed
unsatisfactory to me,
>too, but seems to be the only way out. Trustworthy
computing!
>
>--
>Michael Bednarek, IT Manager, Tactical Global Management
>Waterfront Pl, Brisbane 4000, Australia. "POST NO BILLS"
>http://mcmbednarek.tripod.com/
>.
>

Relevant Pages

  • Re: 677 events
    ... There is no such key in the registry in HKLM. ... >events were disabled by default in SP3. ... This alias is for newsgroup purposes only. ... >>Michael Bednarek, IT Manager, Tactical Global Management ...
    (microsoft.public.win2000.security)
  • Re: SP3?
    ... "If you have installed Windows Internet Explorer® 7 or a beta version of ... Internet Explorer 8, and then install Windows XP SP3, you cannot uninstall ... If you have already encountered this issue, uninstall Windows XP ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Another XP SP3 Question
    ... "If you have installed Windows Internet Explorer® 7 or a beta version of Internet Explorer 8, and then install Windows XP SP3, you cannot uninstall ... ensure Internet Explorer 7 or a beta version of Internet Explorer 8 is not installed before installing Windows XP SP3. ... If you have already encountered this issue, uninstall Windows XP SP3, uninstall Internet Explorer, and then reinstall Windows XP SP3." ...
    (microsoft.public.windowsxp.general)
  • Re: WinXP SP3 anyone?
    ... Did somebody installed Windows XP SP3? ... How does our favorite IDE run against it? ... If you need to be able to downgrade your browser from IE7 then ...
    (borland.public.delphi.non-technical)
  • Re: Service Pack 3
    ... > does use this nomenclature (sp3) for these sort of things. ... Yeah, it's a bit confusing. ... Alias wrote: ...
    (microsoft.public.windowsxp.general)