Re: Errors!

From: Adam Clark (aclark_at_adamclark.biz)
Date: 08/22/05 

Date: Mon, 22 Aug 2005 08:24:31 -0500

Thanks for the response.

I think you may have answered my question. I am trying to figure out where
this error is coming from. I am not sure if it is a program running locally
or remotely. What's funny is it gives a logon type of 2, which means an
interactive logon which could be either / or...... I suppose the best way to
find out would be to physically disconnect this INIS17 from the network and
see if the error continues.

Additionally, this is happening on almost every single computer on the
domain.

Thanks. I will post more as I find out more. If anyone else has experience
with this type of problem, let me know. Suggestions are great.

Adam

"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:OkTJUSWpFHA.2904@TK2MSFTNGP12.phx.gbl...
>I am not quite understanding.
> From the domain (Indy) point of view there is not problem,
> but rather something that should be happening is, namely
> and invalid login attempt is not being allowed.
> So, if by problem you mean this should be allowed, then
> you need to go the the INIS17 machine and determine what
> is repeatedly attempting to log in as indy\backup using either
> an invalid account name or an invalid password.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Adam Clark" <aclark@adamclark.biz> wrote in message
> news:exde5dOpFHA.2952@TK2MSFTNGP15.phx.gbl...
>> Hi,
>>
>> I am having an error come up in my security log. It happens twice every
>> hour. It is event ID 529 and is Logon Failure: Unkown user name or bad
>> password.
>>
>> I think I have it traced backed to the DC's. Does anyone have any
> suggestion
>> on how to fix this problem? See my attachment.
>>
>> Thanks
>>
>> Adam
>>
>>
>>
>>
>
>