From the last couple of months I am having some issues with the administrator account that I have, it would simply lock out and this has started to happen when we changed the password prior to that period. But I was able to understand the cause that was some kind of service that had the password saved. Although, the admin account that I am using locks out very quickly as it is unlocked. I have enable the failure auditing and it is giving me some security log that I have listed below:
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 10/3/2006
Time: 6:17:42 AM
User: NT AUTHORITY\SYSTEM
Computer: EMJDC
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Administrator
Source Workstation: workstation
Error Code: 0xC0000234
----------------------------------------------------------------------------------------------------------------------
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 673
Date: 10/3/2006
Time: 6:17:42 AM
User: NT AUTHORITY\SYSTEM
Computer: EMJDC
Description:
Service Ticket Request:
User Name: administrator@DOMAIN.COM
User Domain: DOMAIN.COM
Service Name: krbtgt/DOMAIN.COM
Service ID: -
Ticket Options: 0x2
Ticket Encryption Type: -
Client Address: 127.0.0.1
Failure Code: 0x12
Logon GUID: -
Transited Services: -
Any ideas?
Bookmarks