Failure Audit ID 537

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

We're getting the following security event logged on one
of our W2k SP3 DC constantly between the hours of approx
10.00am and 5-6.00pm GMT(british summer time). It logs
approx eight times per minute, almost every minute between
those times. Anybody have any ideas?.

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537

Date: 10/07/2003
Time: 12:18:06
User: NT AUTHORITY\SYSTEM
Computer: <domain controller>
Description:
Logon Failure:
Reason: An unexpected error occurred
during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -

I have activated kerberos logging but this doesn't seem to
give any further clues.

Help please.
Mark
 
Back
Top