Re: MachineName$ appear in security log

From: Steven L Umbach (sumbach_at_ameritech.net)
Date: 09/11/03 

Date: Thu, 11 Sep 2003 00:10:39 GMT

Machine passswords are created by the a domain controller when a machine
joins a domain and is changed by the domain controller on a periodic
basis -weekly, I think. --- Steve

http://support.microsoft.com/?kbid=260575
http://www.softstack.com/security/account-password.html

"WS" <ws1010@yahoo.com> wrote in message
news:087601c377bb$7974e700$a001280a@phx.gbl...
> Thanks Steve!
> We got an error saying the account name is correct, but
> the passowrd is not. What password is it? Is it local
> admin PW?
>
> It says The logon to account:MachineName$ by:
> Microsoft_authentication_package_v1_0 from the
> workstation : machineName.
>
> Thanks again.
>
> WS
>
> >-----Original Message-----
> >Those are the computer accounts. Computers [W2K/XP Pro]
> also log onto the domain as
> >users do and have a machine account and password. It can
> be helpful in
> >troubleshooting if you see failures from computer logons
> which may be caused by time
> >skew, or problems with secure channel communications
> among other things. --- Steve
> >
> >"ws" <ws1010@yahoo.com> wrote in message
> >news:640501c377aa$6b6babf0$a501280a@phx.gbl...
> >> Hello,
> >>
> >> We found many successful and failed attempts in the
> >> security log in our WIn2k domain controller. What we
> don't
> >> understand is that the users who log on is
> ComputerName$.
> >> These computers are domain members. i.e. if the computer
> >> name is WScomputer, it appears in the security log as
> >> WScomputer$. The event ID is 538.
> >>
> >> What are these acocunts?
> >>
> >> Can anyone help me to undersand this? Thanks!!
> >>
> >> WS
> >
> >
> >.
> >

Loading