Re: Logon/Logoff Failure Audit - Event 537 in Windows Server 200

From: Adam White (AdamWhite_at_discussions.microsoft.com)
Date: 07/05/05 

Date: Tue, 5 Jul 2005 01:20:02 -0700

Yeah, already looked there and there was nothing obviously similar. Thanks

- Adam

"Jorge_de_Almeida_Pinto" wrote:

> "" wrote:
> > I have a W2k3 RTM member server (2003 domain) running IIS,
> > Microsoft
> > Operations Manager 2005 and CA Unicenter Automation Point v4
> > SP3 + HP
> > Proliant Essentials (compaq support paq) 7.3.
> >
> > I am seeing event 537 logon failure audits twice per minute in
> > the Secuirty
> > Log. All the events look the same:
> >
> > Logon Failure:
> > Reason: An error occurred during logon
> > User Name:
> > Domain:
> > Logon Type: 3
> > Logon Process: Kerberos
> > Authentication Package: Kerberos
> > Workstation Name: -
> > Status code: 0xC000009A
> > Substatus code: 0x0
> > Caller User Name: -
> > Caller Domain: -
> > Caller Logon ID: -
> > Caller Process ID: -
> > Transited Services: -
> > Source Network Address: -
> > Source Port: -
> >
> > There's not a lot to go on. I tried MSKB and EventID and there
> > were no
> > obvious references. Article 318922 talks about domain
> > controllers and NT4,
> > and 327889 talks about using local accounts in WinXP but
> > implies that a user
> > name should be logged as part of the event.
> >
> > I am not sure if 0xC000009A is related to the error
> > "STATUS_INSUFFICIENT_RESOURCES" or not but a quick perfmon
> > shows 19.8 Mb of
> > Pool Nonpaged Bytes which seems OK compared to my other
> > servers.
> >
> > Any ideas?
> >
> > Thanks
> > - Adam
>
> Hi,
>
> See if the following helps
> http://www.eventid.net/display.asp?eventid=537&eventno=194&source=Security&phase=1
>
> Cheers,
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's request
> Articles individually checked for conformance to usenet standards
> Topic URL: http://www.windowsforumz.com/Security-Logon-Logoff-Failure-Audit-Event-537-Windows-Server-2003-ftopict552978.html
> Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1754298
>

Relevant Pages

  • RE: ISA 2000 - Open Remote Port
    ... Please don't worry about it that the port is only opened for outbound ... thank you for using newsgroup. ... Enjoy your day Adam! ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Whaddya know? Ubuntu has BUGS and workarounds. What a pile of crap
    ... Sounds like they can't get their shit together. ... Knowledgebase is a living monument to the stupidy of Windows' twenty ... Microsoft makes excellent software or crap. ... there is Adam the wonder 'tard. ...
    (microsoft.public.windows.vista.general)
  • Re: Print error after loading SP1 on Windows 2003
    ... Dear Adam, ... Jason Tan ... Microsoft Online Partner Support ... | speed of the login after the server boots up. ...
    (microsoft.public.win2000.general)
  • Re: ADAM woes
    ... but you guys don't seem to be very close to being Microsoft specialists to be coming up with Microsoft solutions regardless of how big you are. ... Unless you are messing with Exchange and using CDOEXM most apps should be able to utilize AD from a workgroup machine if you actually have a strong understanding of how authentication works. ... Now certainly even if you knew how to work against your production AD, that isn't something that you want to do with dev work is it? ... I know for a fact I could grab most of the info from our corporate directory and put it on my laptop on an ADAM instance but I also know that I could rightfully be fired for doing so because my laptop is not a safe location for that information. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Major Nelson on the blown update:
    ... The actual report of this error (other ... Yeah I am a fortune teller and knew this error would come about on a system ... within SECONDS you were posting messages you had read from ... you are claiming the problem is bigger than Microsoft ...
    (alt.games.video.xbox)