Failure Aduits

  • Thread starter Thread starter Aaron Browne
  • Start date Start date
A

Aaron Browne

I am have 5-10 faulure aduits from the same account on the
same domain in the space of one second can someone please
advise me on what may be the cause of such failure and is
it just normal for the system to do this or could it be
that a program is trying to break account by bombing pass
works.

Your Faithfully

Aaron
 
Assuming Event ID: 676

Failure Codes:
6 - Client not found in the Kerberos database.
7 - Server not found in the Kerberos database. This
generally indicates a service principal name (SPN) has not
been registered for the service.
12 - logon failed because of time-of-day or workstation
restrictions.
18 - the account was locked out because of failed logons,
disabled by the administrator, or expired.
23 - Password has expired.
32 - Ticket has expired.
33 - Ticket not yet valid.
34 - Request is a replay. Someone is trying to play back
a Kerberos client''s response; you are possibly being
attacked.
37 Clock skew too great. Kerberos is time-critical; make
sure all clocks are synchronized
 
Back
Top