Event ID: 673 - Failure Audit

From: Ben (bjblackmore_at_xyz.hotmail.com)
Date: 05/23/05

  • Next message: Eddie: "Re: Kerberos Question" 
    Date: Mon, 23 May 2005 09:52:43 +0100

    Hi,

    I'm receiving the following error in my security log on our server. I've
    check the Microsoft Kbase, and eventid.net but I can't find anything to
    describe what the problem is. I have found details on event id 673, but they
    describe events with Ticket Option 0x40830000 nothing describing Option
    0x40810000. This is the only error being received, and it seems to be
    happening at random times (I have one at 21:15 and 01:34). Can anyone shed
    some light on this?

    Cheers

    Ben

    Event Type: Failure Audit
    Event Source: Security
    Event Category: Account Logon
    Event ID: 673
    Date: 22/05/2005
    Time: 15:34:03
    User: NT AUTHORITY\SYSTEM
    Computer: SERVER1
    Description:
    Service Ticket Request:
      User Name: SERVER2$@DOMAIN.COM
      User Domain: DOMAIN.COM
      Service Name: host/server2.domain.com
      Service ID: -
      Ticket Options: 0x40810000
      Ticket Encryption Type: -
      Client Address: 192.168.254.130
      Failure Code: 0x12
      Logon GUID: -
      Transited Services: -

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

  • Next message: Eddie: "Re: Kerberos Question"

    Relevant Pages

    • Re: Event ID: 673 - Failure Audit
      ... Thanks for the heads up. ... while, the error seems to pop up at random times, 4am last night! ... >> I'm receiving the following error in my security log on our server. ... >> describe events with Ticket Option 0x40830000 nothing describing Option ...
      (microsoft.public.windows.server.security)
    • Deleted Profile by mistake Lost personal Data !
      ... receiving "security log full" error message, ... profile and deleted entire directory for my profile ...
      (microsoft.public.windowsxp.security_admin)