First make sure that your network has proper firewall protection from the
interenet. Those events indicate attempts to access the built in
administrator account with a bad password. Go to a self scan site such as
http://scan.sygatetech.com/ to do a self scan to see if you have unecessary
vulnerabilites - particualry ports 139 and 445. I would also find out where
the attempts are coming from. If these are happening from the lan, then you
know what workstation initiated the bad logon and you may want to question
the user or see if there are mapped drives with persistent credentials,
services, Scheduled Tasks using expired/incorrect passwords, etc. The links
below may be helpful. --- Steve
http://www.microsoft.com/downloads/d...displaylang=en
http://support.microsoft.com/default...b;en-us;273499
"Prasheel" <(E-Mail Removed)> wrote in message
news:2a5e01c42867$cdbe7490$(E-Mail Removed)...
> We are having a big problem users being randomly locked.
> When I checked the logs I get the following message.
> The logon to account: Administrator
> by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> from workstation: WIN2000
> failed. The error code was: 3221225578
>
>
> How could i fix this problem.. I check microsoft, talk
> about the subject doesn't really explain what cause that
> problem & fix it.. Please advise..
>
> Thank you..