Re: 677 Failure Audits in Security Event Log?
From: Rob McShinsky (Anonymous_at_List.com)
Date: 03/24/04
- Next message: Keith W. McCammon: "Re: Wich protocol numbers?"
- Previous message: James Williams: "Re: Log Viewer Help"
- In reply to: HG: "Re: 677 Failure Audits in Security Event Log?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 24 Mar 2004 16:04:34 -0500
Yes. I have been there... Nothing.
"HG" <none@none.com> wrote in message
news:TFk8c.299464$B81.4457485@twister.tampabay.rr.com...
> Rob,
>
> Dunno if this would help but check www.eventid.net and place the 677 and
> see
> what it comes out to.
>
> Good Luck
>
> GX
>
>
> "Rob McShinsky" <Anonymous@List.com> wrote in message
> news:#NrODvbEEHA.2076@TK2MSFTNGP09.phx.gbl...
>> We are currently getting many of the following errors below in our
> security
>> logs (Failure Audit) quite often. The Client machine address is always
> one
>> of our Windows 2003 members server, with all 27 of them leaving messages
>> like this. Our Windows 2000 members servers have never left a 677 error
>> (verified with Eventcomb). Our current domain structure is:
>>
>> Windows 2000 Native AD (All Win2k Servers SP4 All relevant Hotfixes
> through
>> March)
>> Bind 9.2 DNS
>> Win2k WINS
>> NT, W2k, and W2k3 member servers (approx 200 1/8, 3/4, 1/8)
>> NT, W2k and XP workstations. (1/4, 1/2, 1/4)
>>
>> Any Help would be appreciated.
>>
>> Event Type: Failure Audit
>> Event Source: Security
>> Event Category: Account Logon
>> Event ID: 677
>> Date: 3/24/2004
>> Time: 9:27:58 AM
>> User: NT AUTHORITY\SYSTEM
>> Computer: DH324
>> Description:
>> Service Ticket Request Failed:
>> User Name:
>> User Domain:
>> Service Name:
>> Ticket Options: 0x40830000
>> Failure Code: 0x29
>> Client Address: 130.189.243.38
>>
>> Robert B. McShinsky
>> Dartmouth Hitch*** Medical Center
>> Lebanon, NH 03756
>>
>>
>>
>>
>
>
- Next message: Keith W. McCammon: "Re: Wich protocol numbers?"
- Previous message: James Williams: "Re: Log Viewer Help"
- In reply to: HG: "Re: 677 Failure Audits in Security Event Log?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]