Pre-authentication failed

From: Daniel Borrowman (~remove~dborrowman_at_centracks.com.au)
Date: 05/03/05 

Date: Tue, 3 May 2005 13:20:25 +1000

Hi Guys,

I get this Security event logged 10 times in a row on my Windows 2003 Server
SP1 from a Windows 2003 Server SP1 members server every hour.

Event ID: 675
Source: Security
Category: Account Logon

Pre-authentication failed:
  User Name: Administrator
  User ID: DOMAIN\administrator
  Service Name: krbtgt/DOMAIN
  Pre-Authentication Type: 0x2
  Failure Code: 0x18
  Client Address: 10.0.4.2

I have tried removing it from the domain and rejoining it and I still get
this log.

Cheers,

Daniel

Relevant Pages

  • SecurityFocus Microsoft Newsletter #154
    ... MICROSOFT VULNERABILITY SUMMARY ... ISS RealSecure Server Sensor SSL Denial Of Service Vulnerabi... ... Roger Wilco Remote Server Side Buffer Overrun Vulnerability ... available for Microsoft Windows operating systems. ...
    (Focus-Microsoft)
  • Re: Pre-authentication failed for Windows 2008 systems
    ... Failure Code: 0x19 ... Client Address: SERVER IP ... Our active directory domain consists of two windows 2003 R2 x64 ... On the domain controller, ...
    (microsoft.public.windows.server.security)
  • SecurityFocus Microsoft Newsletter #49
    ... Subject: SecurityFocus Microsoft Newsletter #49 ... Microsoft Windows NNTP Denial of Service Vulnerability ... Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability ... Microsoft ISA Server H.323 Memory Leak Denial of Service... ...
    (Focus-Microsoft)
  • ~~~~~~~~~~~~~~ CANNOT FIND ~~~~~~~~~~~~~~
    ... acrobat cannot find external windows handler ... activesync cannot find exchange server ... aol internet explorer cannot find server ... brother network scanner cannot find pc ...
    (sci.geo.fluids)
  • ~~~~~~~~~~~~~~~ CANNOT FIND ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ... cannot find server or dns error ... windows cannot find null ... windows cannot find the network path ... cannot find internet explorer on computer ...
    (comp.protocols.snmp)