Re: More Errors!

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 09/01/05

  • Next message: Brian Steele: "Finding out which account added a workstation to the AD..." 
    Date: Thu, 1 Sep 2005 01:05:52 -0700

    Adam,

    It is still not clear to me just what you see as the problem.
    The pre-authentication failure is just saying that Kerberos did not
    grant the ticket needed for the login to succeed. One common
    cause for this is use of incorrect password.

    Are you saying that you know what is trying to log in type 2 at
    that machine, and that it is using an existing domain account with
    correct password, and that all should be OK?
    Or, are you saying you do not know what is initiating this login
    attempt repeatedly? 

    -- 
Roger Abell
Microsoft MVP (Windows Server : Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Adam Clark" <aclark@adamclark.biz> wrote in message 
news:%23l1QIo0pFHA.3884@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> I have been working on a problem with security errors filling up my event 
> logs. I have error on error on my clients that reads:
>
> Logon Failure:
>    Reason: Unkown username or bad password
>    User Name: backup
>    Domain: INDY
>    Logon Type: 2
>    Logon Process: Advapi
>    Authentication Package: Negotiate
>    Workstation Name: INIS17
>
> My DC has the following errors in the event log
>
> Pre-authentication failed:
>    User Name: backup
>    User ID: INDY\backup
>    Service Name: krbtgt/INDY
>    Pre-Authentication Type: 0x2
>    Failure Code: 0x18
>    Client Address: 192.0.0.40
>
>
> I am sure these are related as they occur almost at the ssame time and the 
> client IP address of INIS17 is 192.0.0.40
>
> Does anyone have any clue how to fix this? I cannot find any information 
> that is clear on this topic.
>
> Thanks
>
> Adam
>
>
>
  • Next message: Brian Steele: "Finding out which account added a workstation to the AD..."

    Relevant Pages

    • Wireless help!
      ... i managed to see my computers on the network but now it's saying "Logon ... Failure: the user has not been granted the requested logon type at this ...
      (microsoft.public.windowsxp.network_web)
    • Re: Back for a couple of days
      ... > the UK means that something was a huge failure, ... > that in the US it means it was a huge success. ... In the US, I believe the distinction lies between saying, "The show ... bombed" and "the show was da bomb". ...
      (rec.arts.tv.uk.eastenders)
    • Re: PA needs help passing Lyme legislation
      ... Where do you think Fauci and Gerberding get ... What I am saying is that the failure to pursue the research on cystic ... EIS has a culture of trying not to panic the ...
      (sci.med.diseases.lyme)
    • Re: What, exactly, is Apples iPod business model?
      ... Gum your gruel down. ... software and formats to raise the mean time between failure ... people who have been addicted to their proprietary devices. ... I don't understand what he's saying. ...
      (comp.sys.mac.apps)
    • Re: OT: Dont mention the war
      ... I remember Wicked Uncle Nigel ... saying something like: ... It marks our failure of foreign policy. ...
      (uk.rec.motorcycles)
    • Quantcast