Event ID 676

From: djc (noone_at_nowhere.com)
Date: 07/26/04 

Date: Mon, 26 Jul 2004 14:52:14 -0400

Source: Security
Category: Account Logon
Authentication Ticket Request Failed:
  User Name: smithly
  Supplied Realm Name: HELLER.COM
  Service Name: krbtgt/HELLER.COM
  Ticket Options: 0x40810010
  Failure Code: 0x12
  Client Address: 10.10.100.100

according to the info I found on this failure code (12), this event is
because of a time of day or workstation restriction. This would seem to make
sense because the client address listed is a server that this user would not
have the log on locally user right assigned for.

Is this correct, this is telling me that smithly has attemped to logon to
10.10.100.100?

Relevant Pages

  • Re: Re-occuring Administrator User Account Lockout
    ... I guess I should have read down to the failure code. ... Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA ... >>Event Category: Account Logon ... >>Authentication Ticket Request Failed: ...
    (microsoft.public.win2000.active_directory)
  • Re: Event ID 676
    ... Failure code 0x12 can be a variety of reasons but not ... > Category: Account Logon ... > Authentication Ticket Request Failed: ... > sense because the client address listed is a server that this user would not ...
    (microsoft.public.win2000.security)
  • Re: Event ID 676
    ... Mark-Allen Perry ... I think where I am confused is the client address.. ... am expecting it to be 'from where' the logon was attempted... ... Failure code 0x12 can be a variety of ...
    (microsoft.public.win2000.security)
  • Re: Repeated 675,681 and 677 error codes in security log
    ... > I have been monitoring the event logs on their servers, the security logs ... > The usernames and client addresses are all different, ... > username: ACraig ... > Failure code: 0x18 ...
    (microsoft.public.win2000.security)
  • Re: Kerberos errors
    ... These machines logon, but still bring back these ticket and pre-authentication errors. ... Client Address: x.x.x.x ... Pre-Authentication Type: 0x0 ... Failure Code: 0x19 ...
    (microsoft.public.windows.server.active_directory)
Quantcast